Discuss security and good practice responsibilities of shared group resource owners in a central location.
Periodic review of membership, permissions and access control.
More frequent is more secure, at least once per year and at certain events.
Events which initiate a review:
Security incidents
Someone leaves the owner's group (e.g. a student leaves a lab group, or moves to a different project)
Someone moves to a role with greater permissions or responsibilities within the owner's group (e.g. a staff member takes on a data stewardship role, needing to see all data)
Periodic review of project membership and access control. At least annually.
FERPA training is available: If your project(s) are accessible by students, be aware metadata about your project(s) may contain FERPA-protected sensitive data. (https://www.uab.edu/registrar/ferpa/faculty-staff)
What would you like to see added?
Discuss security and good practice responsibilities of shared group resource owners in a central location.
Periodic review of membership, permissions and access control.