A colleague of mine tells me “You’re like a lifeguard, you tell us how far to go in the ocean and where to go, and you call us back if we go too far but you don’t stop us from going into the water.”

To put what he said into context, a group of us, some folks from our student life office and some technical staff from my office which is the central technology department for the Division of Student Affairs, had just seen a demo of a product to manage student organizations.  The authentication used by the vendor product uses facebook connect.  While the vendor product was really beyond what we could ever build and everyone watching the demo, including me were very impressed with the product, I unfortunately had to dampen the enthusiasm of those present. I had to mention that using facebook connect may not be an idea that will be readily accepted as an option by security administrators on campus. Using a third party like facebook for authentication for an official campus system is a new concept on my campus.  In my role as the Associate Director of Information Systems and Software Development, I unfortunately have to play  the role of  “bad guy” sometimes. Many times,  some of these concerns I share are not even necessarily mine, but I do have to share them anyways.  I think in general, I am more flexible in how far to push boundaries when using new technologies, relative to some of my technical colleagues. However, I still do need to represent their perspectives. Fortunately, I’ve built up my reputation with the departments I have served throughout the years that I’m not a “nay-sayer” and I’m a strong advocate for their programs and innovative technologies. My reputation allows me to be frank with my concerns as someone charged with protecting student academic and health information and enforcing security and electronic policies.

Continue reading →