Jump to content

Get Your
Free 30-Day Trial WhatsUpGold

Family Educational Rights and Privacy Act (FERPA)

Did you know that, under the Family Educational Rights and Privacy Act (FERPA), federally funded, US-based educational institutions must protect student records to keep their funding?

Learn how you can meet FERPA requirements with WhatsUp Log Management Suite

Requirements How WhatsUp Log Management Suite can help

20 U.S.C. § 1232g; Title 34, Part 99--Family Educational Rights and Privacy

(4) (A) For the purposes of this section, the term "education records" means, except as may be provided otherwise in subparagraph (B), those records, files, documents, and other materials which --

  • (i) contain information directly related to a student; and
  • (ii) are maintained by an educational agency or institution or by a person acting for such agency or institution.

Part b.1: No funds shall be made available under any applicable program to any educational agency or institution which has a policy or practice of permitting the release of educational records, or personally identifiable information contained therein other than directory information...

  • Data and records of electronic transactions, including computer logs can be considered "student records" under FERPA.
  • According to the America Association of Collegiate Registrars and Admissions Officers (AACRAO), "Education record means those records, files, documents and other materials which contain information directly related to a student and are maintained by an educational agency or institution or by a person acting for such agency or institution," and "record is understood to mean any information or data recorded in any medium (e.g., handwriting, print, tapes, film, microfilm, microfiche, any form of electronic data storage."
  • Automatically collect log files across the institution
  • Support both Windows event log and Syslog environments
  • Store and archive all log files for as long as necessary, enabling multi-year data storage in compliance with regulatory requirements (up to 7 years in some states)
  • Protect archived log files from tampering via cryptographic hashing
  • Real-time alerts and reports on complete audit trails of access to, and manipulation of education records, or personally identifiable information

Secure and protect student records with WhatsUp Log Management Suite. We recommend using the following alerts and reports to provide IT management, security and compliance officers with key resources to demonstrate compliance with FERPA regulations:

Requirements How WhatsUp Log Management Suite can help

20 U.S.C. § 1232g; Title 34, Part 99--Family Educational Rights and Privacy

(4) (A) For the purposes of this section, the term "education records" means, except as may be provided otherwise in subparagraph (B), those records, files, documents, and other materials which --

  • (i) contain information directly related to a student; and
  • (ii) are maintained by an educational agency or institution or by a person acting for such agency or institution.

Part b.1: No funds shall be made available under any applicable program to any educational agency or institution which has a policy or practice of permitting the release of educational records, or personally identifiable information contained therein other than directory information...

  • Data and records of electronic transactions, including computer logs can be considered "student records" under FERPA.
  • According to the America Association of Collegiate Registrars and Admissions Officers (AACRAO), "Education record means those records, files, documents and other materials which contain information directly related to a student and are maintained by an educational agency or institution or by a person acting for such agency or institution," and "record is understood to mean any information or data recorded in any medium (e.g., handwriting, print, tapes, film, microfilm, microfiche, any form of electronic data storage."

Alert and report for these key events:

  • Any changes to File or Folder ACLs
  • Registry Access - adds, changes, and deletions
  • User account changes that provide administrator equivalent permissions
  • Active Directory access and changes
  • Changes to Groups - adds, changes or deletions
  • Windows and SSH login failures and successes
  • System events - process start and shutdown
  • Application failure, start or shutdown
  • IDS and anti-virus logs
  • Interfaces for high TCP and UDP traffic
  • Server offline or online and reboots
  • Access to network infrastructure
  • Changes to ACLs on switches, routers or firewalls
  • DNS changes
  • Web server access and permission changes
  • HTTP "404" errors
  • FTP server access and file transfers
  • Server and workstation logs for intrusion incidents and policy changes
  • Access and permission changes to Files, Folders, and Objects containing student records data

Key Windows Event Logging Categories to Enable

  • Logon Events - Success/Failure
  • Account Logons - Success/Failure
  • Object Access - Success/Failure
  • Process Tracking - Success
  • Policy Change - Success/Failure
  • Account Management - Success
  • Directory Service Access - Success/Failure
  • System Events - Success/Failure