CAN the SSN
A guide to resources for removing social security numbers from UGA systems.
Communications
The following announcements have been sent out regarding the SSN Replacement initiative.
- Memo from the Sr. Vice Presidents to UGA Leadership
- Memo from EITS Directors to UGA IT Administrators
- CAN the SSN SecureUGA module. Please log in and choose module #11, CAN the SSN.
SSN Removal Guides
Policies and Guidelines
Several policies and guidelines have been developed to help protect sensitive information, and to secure sensitive or critical servers. Many of these documents are in draft form and may change.
- Main Infosec policy index
- UGA Privacy Policy
- Minimum Security Standards
- Information Classification Standard
- Guidelines for Handling Sensitive Data
- Guidelines for Trusted Computing
- Electronic Equipment Disposal and Transfer Recommendations
ASSETs
All sensitive systems, including those containing SSNs, should be included in each department's ASSETs report. Please be aware of the types of questions ASSETs classifies to help make the SSN discovery process as useful as possible. All Unit Security Liaisons should update ASSETs with any systems that must retain SSN storage or transmission.
SSN Discovery Tools
The following tools may help in scanning individual computers for potential SSN, or be used over a well defined network. These tools are not quick fixes and will likely be one part of a detailed SSN discovery process.
- Texas' Senf Recommended by EITS - usage instructions.
- Cornell's Spider
- Virginia Tech's Find_SSN
- Illinois' Firefly
- Miami's SSN Finder
Senf and Firefly require Java
UGA ID Management SSN Translation Tools
The following tools will be available during August, 2009. Future training will be available for these tools. These tools will provide the following functions.
- A web interface to translate SSN to CAN or MyID
- A database for this translation
- Connectors to automate the process of translation from SSN to CAN
- A web interface to verify users over the phone without using SSNs
For the latest updates, please visit the ID Management website.
External Resources
These universities have quality documentation on their SSN removal initiatives which may be worth investigating for further information.
