What Has Been Done to Protect SSNs at VCU

The University has taken a number of steps designed to strengthen the security surrounding confidential information. Central among those efforts has been a systemic attempt to eliminate the use of social security numbers as identifiers. Those steps include:

• Replacing social security numbers with a unique student number in the Student Information System
• Modifying hundreds of computer reports and information screens to eliminate or mask SSNs to prevent inadvertent disclosure
• Developing the eID as an alternative login mechanism to replace multiple login processes, some of which used all or a portion of the SSN
• Modifying other login mechanisms to permit use of the student number or VCUCard number as an alternative to SSNs

These and other efforts are ongoing as we move away from decades-old systems and processes that relied on social security numbers. We will also be taking action to limit access to University servers and workstations from the Internet. This is part of a major redesign of the VCU network that has been underway for over a year. These changes may impact the way that VCU computer users access University technology resources and information but are necessary to ensure the integrity and security of our systems and network.