The interview schedule was finally set, at least for the first week of the onsite phase of the Red Rover University assessment. Through discussions during the pre-assessment site visit, we determined that the college was most concerned about liability for systems used to initiate attacks on other systems and Family Education Rights and Privacy Act (FERPA) regulations. FERPA addresses the privacy protection responsibilities for educational institutions.

The university has four colleges along with the associated support staff. Each college has its own technology staff responsible for systems administration and security for that particular college. The administrative functions of the college are supported by the university s Information Technology (IT) department. Table 7.5 identifies the Week 1 schedule of interviews.