<node id="638770">
  <nid>638770</nid>
  <type>news</type>
  <uid>
    <user id="34822"><![CDATA[34822]]></user>
  </uid>
  <created>1599158785</created>
  <changed>1600380860</changed>
  <title><![CDATA[Banner Production Database Access Restricted]]></title>
  <body><![CDATA[<p>The Data Security Task Force and&nbsp;Banner&nbsp;team continues to&nbsp;strengthen the security of protected student data by&nbsp;ensuring that direct (SQL) access to&nbsp;the&nbsp;Banner production database&nbsp;is limited to verified users, departments, and extended systems.&nbsp;The users, departments, and extended systems&nbsp;identified through previous surveys&nbsp;will maintain access.&nbsp;This multi-phase process began&nbsp;in September and continues throughout November.</p>

<p>Moving forward, non-registered&nbsp;users&nbsp;or systems&nbsp;will not be able run&nbsp;direct&nbsp;queries&nbsp;against&nbsp;the&nbsp;Banner&nbsp;database.&nbsp;End-users who need to maintain direct access to the&nbsp;Banner&nbsp;production database for day-to-day use&nbsp;are invited to pilot a two-factor authenticated virtual desktop (VDI) solution to access&nbsp;Banner&nbsp;until mid-October. This VDI-based solution will enable use of a limited set of tools to maintain current business needs (connect to the&nbsp;Banner&nbsp;database to execute SQL queries and to&nbsp;Banner&nbsp;Jobsub servers to initiate&nbsp;Banner&nbsp;Jobs). In mid-October, all users with direct access to the production database will&nbsp;be expected to&nbsp;transition to solely leverage the VDI solution.&nbsp;</p>

<p><em><strong>Please note that Banner 9 Admin Pages,&nbsp;OSCAR, and SSH access, will not be impacted by this change.&nbsp;</strong></em></p>

<p><strong>Timeline</strong></p>

<ol>
	<li>Sept. 16: Direct access to&nbsp;Banner&nbsp;production database removed from all users, departments, and extended systems not registered, unless otherwise noted.</li>
	<li>September&nbsp;to Mid-October: VDI pilot</li>
	<li>Mid-October (exact date to be determined): &nbsp;All users with direct SQL access to the production database will&nbsp;be expected to&nbsp;transition to solely leverage the VDI solution. Any exemptions or exceptions will be reviewed on an individual basis. &nbsp;</li>
</ol>

<p>For questions regarding the change, email <a href="mailto:bannercompliance@gatech.edu?subject=Banner%20Prod%20Database%20Access">bannercompliance@gatech.edu</a>.&nbsp;</p>
]]></body>
  <field_subtitle>
    <item>
      <value><![CDATA[]]></value>
    </item>
  </field_subtitle>
  <field_dateline>
    <item>
      <value>2020-09-03T00:00:00-04:00</value>
      <timezone><![CDATA[America/New_York]]></timezone>
    </item>
  </field_dateline>
  <field_summary_sentence>
    <item>
      <value><![CDATA[The Data Security Task Force and Banner team continues to strengthen the security of protected student data by ensuring that direct (SQL) access to the Banner production database is limited to verified users, departments, and extended systems.]]></value>
    </item>
  </field_summary_sentence>
  <field_summary>
    <item>
      <value><![CDATA[<p>The Data Security Task Force and&nbsp;Banner&nbsp;team continues to&nbsp;strengthen the security of protected student data by&nbsp;ensuring that direct (SQL) access to&nbsp;the&nbsp;Banner production database&nbsp;is limited to verified users, departments, and extended systems.</p>
]]></value>
    </item>
  </field_summary>
  <field_media>
          <item>
        <nid>
          <node id="626044">
            <nid>626044</nid>
            <type>image</type>
            <title><![CDATA[Cybersecurity stock image]]></title>
            <body><![CDATA[]]></body>
                          <field_image>
                <item>
                  <fid>238338</fid>
                  <filename><![CDATA[Cybersecurity_stock_image.jpg]]></filename>
                  <filepath><![CDATA[/sites/default/files/images/Cybersecurity_stock_image.jpg]]></filepath>
                  <file_full_path><![CDATA[http://www.tlwarc.hg.gatech.edu//sites/default/files/images/Cybersecurity_stock_image.jpg]]></file_full_path>
                  <filemime>image/jpeg</filemime>
                  <image_740><![CDATA[]]></image_740>
                  <image_alt><![CDATA[Stock photo of stylized padlock icons surrounded by a word cloud of information security terms.]]></image_alt>
                </item>
              </field_image>
            
                      </node>
        </nid>
      </item>
      </field_media>
  <field_contact_email>
    <item>
      <email><![CDATA[]]></email>
    </item>
  </field_contact_email>
  <field_location>
    <item>
      <value><![CDATA[]]></value>
    </item>
  </field_location>
  <field_contact>
    <item>
      <value><![CDATA[]]></value>
    </item>
  </field_contact>
  <field_sidebar>
    <item>
      <value><![CDATA[<p>The Data Security Task Force and&nbsp;Banner&nbsp;team continues to&nbsp;strengthen the security of protected student data by&nbsp;ensuring that direct (SQL) access to&nbsp;the&nbsp;Banner production database&nbsp;is limited to verified users, departments, and extended systems.</p>
]]></value>
    </item>
  </field_sidebar>
  <field_boilerplate>
    <item>
      <nid><![CDATA[]]></nid>
    </item>
  </field_boilerplate>
  <!--  TO DO: correct to not conflate categories and news room topics  -->
  <!--  Disquisition: it's funny how I write these TODOs and then never
         revisit them. It's as though the act of writing the thing down frees me
         from the responsibility to actually solve the problem. But what can I
         say? There are more problems than there's time to solve.  -->
  <links_related> </links_related>
  <files> </files>
  <og_groups>
          <item>174291</item>
      </og_groups>
  <og_groups_both>
      </og_groups_both>
  <field_categories>
      </field_categories>
  <core_research_areas>
      </core_research_areas>
  <field_news_room_topics>
      </field_news_room_topics>
  <links_related>
      </links_related>
  <files>
      </files>
  <og_groups>
          <item>174291</item>
      </og_groups>
  <og_groups_both>
          <item><![CDATA[OIT]]></item>
      </og_groups_both>
  <field_keywords>
          <item>
        <tid>183656</tid>
        <value><![CDATA[oit feature]]></value>
      </item>
      </field_keywords>
  <field_userdata>
      <![CDATA[]]>
  </field_userdata>
</node>
