Benedictine College is committed to maintaining the privacy, confidentiality, integrity, and security of student educational records. Access to student information is restricted based on business need and job responsibilities. Student records are accessible only to authorized personnel within designated departments. Access permissions are granted according to the principle of least privilege and are reviewed as part of normal account administration processes.
The College utilizes multiple layers of security controls to protect student data from unauthorized access, disclosure, alteration, or loss. Multi-Factor Authentication (MFA) is required for access to Benedictine College computing resources. College employees must authenticate using MFA when logging into institution-owned computers and when accessing College resources remotely.
Network access is controlled through a secured Enterprise network that is restricted to Benedictine College-owned devices. Access to institutional systems containing student information is generally limited to users connected to the College’s Enterprise network while on campus. Employees requiring off-campus access must utilize the College’s Virtual Private Network (VPN). The VPN is available only on Benedictine College-owned computers and requires MFA authentication, providing an additional layer of security for remote access to student information systems.
The College’s network infrastructure is protected through multiple security technologies, including threat intelligence platforms and next-generation firewalls. These systems help identify, prevent, and mitigate unauthorized network activity and cyber threats before they can impact institutional resources.
Benedictine College also employs a Managed Detection and Response services, including Endpoint Detection and Response (EDR) and antivirus protection, to continuously monitor systems for suspicious activity, malware, ransomware, and other cybersecurity threats. Security events are monitored and investigated to ensure the ongoing protection of institutional and student data.
To support data availability and recovery, the College maintains a comprehensive backup strategy utilizing the industry’s top backup appliance. Critical institutional data, including systems containing student records, is backed up regularly to ensure business continuity and recovery capabilities in the event of a system failure, cybersecurity incident, or other disruption.
Through these administrative, technical, and physical safeguards, Benedictine College maintains a secure environment for student educational records and remains committed to protecting student privacy in accordance with applicable federal regulations, including the Family Educational Rights and Privacy Act (FERPA).