Security Requirements

Every department is required to have a security assessment review prior to receiving student data. Those departments who have had a security review within the last year will be exempted. Please contact Dan Jones, Boulder Campus Director of IT Security, at 303-735-6637, to begin this process.

Every designated data custodian is required to complete and pass formal Family Educational Rights and Privacy Act (FERPA) training before the data request will be submitted to University Information ServicesÌý(UIS) for development.ÌýAny faculty or staff member who will access student data in the departmental data repository must also complete this FERPA training. Individuals who are not employed by the University of Colorado should never have access to view student data.

Request a Student Record Interface

Step 1 – Read the Requirements for Shared Student Data Repositories
The requirements for shared student data repositories includeÌýthe expectations of campus departments that store student data on shared databases within the department.

Step 2 – Complete the Documentation
Complete the following documents and send them electronically toÌýCU Boulder CU-SIS Interface Request:
Ìý

Important:ÌýEvery department is required to have a security assessment review prior to receiving the requested student data. More information can be found on theÌýCognos Reporting & Student DataÌýpage. Once applications are approved and the security review is complete, the Office of the Registrar is notified, and the request is then sentÌýto UIS for development. Questions should be directed to Lincoln Nkin.

If you have an existing interface developed by UISÌýand it just needs a modification, please use theÌýIntegration Design Specification Template.

Step 3 – Complete the Required SkillSoft Course
Complete theÌýCU: FERPA SkillSoft course (seeÌýCU-SIS AccessÌýfor details). Your completion and score will be recorded, and approved applications will be forwarded to UIS for development.
Ìý

Note: There is currently a significant backlog for this development.