1. 1 P-20W Identity Management November 16, 2011 11:15 – 12:15 Bob Swiggum, GA Bill Hurwitch, ME Cathy Wagner, MN

2. 2 P-20W Identity Management: GA Role Based Security Challenge Don’t make the district folks remember more ID and passwords Don’t cause any more security work for district folks Provide role based security access to LDS. Provide security to turn off access to individual pieces of information (i.e. – discipline) Progress Developed a process to authenticate access to LDS using existing ID and password Developed a system to allow existing roles within local SIS to be used in LDS Added feature to allow additional roles to be defined by districts at their option Working on enhancements to turn off access to individual pieces of information

3. 3 P-20W Identity Management: ME State Agencies in P-20W Longitudinal Data System Departments of: Education, Health and Human Services, Labor, Corrections, University of Maine System, Maine Community Colleges System Cognos Framework – Client Index Table Established by State Office of Information Technology (OIT) to link multiple Health and Human Services database systems with different identifiers Stores multiple agency identifiers in one secure table Agencies submit data requests using own identifiers The Framework converts the requesting agency’s identifier to the receiving agency’s identifier and returns the data with the requestor’s identifier Agencies do not see the other agencies’ identifiers First Name MI Last Name Birth Date GenderRaceSSNMaineCare IDSSIDUMS ID JohnRSmith1/1/1995MaleC123456789123456789A987654321 JudyLJones2/2/1990FemaleC987654321222222222A123456789111223

4. 4 P-20W Identity Management : ME Security OIT Governance and policies MOAs/MOUs established between agencies for data sharing Ensures adherence to Federal and State policies including FERPA, HIPAA Special procedures for collecting/storing SSN Challenges Data cleansing to eliminate duplication – 1.2 million records Establishing business rules for creating new identities in Client Index Table Policy limitations – legislation on use of personal identifiers and SSN K-12 collection – SSN optional, cannot be mandated by Maine DOE Focus on Career & Technical Education centers Fewer issues with Adult Education, Postsecondary and Workforce Data sharing/policies with other State agencies and researchers Do not create another “SSN”

5. Contact Info: Bob Swiggum, 404-657-0810, rswiggum@doe.k12.ga.usrswiggum@doe.k12.ga.us Bill Hurwitch, 207-624-6816, Bill.Hurwitch@maine.govBill.Hurwitch@maine.gov Cathy Wagner, 651-582-8688, cathy.wagner@state.mn.uscathy.wagner@state.mn.us 5 P-20W Identity Management: Contacts