Externally Hosted Web 2.0 Services What should the policy be? Chris Adie, Information Services, University of Edinburgh 3 May 2007

Outline Background Legislative issues University regulations Service concerns Risk management Conclusions

Background

Legislative issues

University regulations

Service concerns

Risk management

Conclusions

Background What are Externally Hosted Web 2.0 Services? Why use them? Users want guidance Development process for guidelines Status of guidelines What do they say?

What are Externally Hosted Web 2.0 Services?

Why use them?

Users want guidance

Development process for guidelines

Status of guidelines

What do they say?

Legislative issues Data Protection Act University-supplied information Information supplied by the individual Freedom of Information Act Disability Discrimination Acts

Data Protection Act

University-supplied information

Information supplied by the individual

Freedom of Information Act

Disability Discrimination Acts

University regulations Assessment Branding Computing Regulations

Assessment

Branding

Computing Regulations

Service concerns Security of service provider Confidentiality Data ownership Data security Performance Reliability Support Single sign-on Lock-in Longevity Functional stability

Security of service provider

Confidentiality

Data ownership

Data security

Performance

Reliability

Support

Single sign-on

Lock-in

Longevity

Functional stability

Risk management Risk register Probability, Impact, Mitigation, Early warning Template Some risks pre-populated Anticipated use

Risk register

Probability, Impact, Mitigation, Early warning

Template

Some risks pre-populated

Anticipated use

Conclusions Very early days, feeling our way Important to establish feedback routes Get users thinking about the risks without unnecessarily discouraging them! Other things: External user access to internal Web 2.0 services

Very early days, feeling our way

Important to establish feedback routes

Get users thinking about the risks without unnecessarily discouraging them!

Other things:

External user access to internal Web 2.0 services