Technology security officer Scaturro hired

Fulfilling its pledge to put someone in charge of securing private campus data, the University announced yesterday the appointment of Anthony Scaturro as information technology security officer.

The appointment, effective Nov. 1, represents an effort by the University to prevent unauthorized users from accessing private files. The position is new and reflects a growing concern among universities, highlighted by this summer's admission scandal, that private information may be vulnerable.

Scaturro is charged with finding solutions that balance security and convenience, finding the best products and making security cost-effective, said Betty Leydon, vice president for information technology.

In recent years, Congress has enacted many new laws tightening privacy regulations, such as the Health Insurance Portability and Accountability Act of 1996, which restricts access to medical records. "If information is held on computers, and it's information that shouldn't be disclosed, then we have to make sure that there aren't backdoors," Scatturo said, noting that he will ensure that University systems comply with new laws.

Scatturo said he will spend the first two months assessing how well University systems secure data — from academic records to faculty research.

"You can't just walk in with this magic pill and say, 'If you buy this magic pill, it's going to solve all your security needs,'" he said.

Working with students, faculty and administrators, Scatturo said he hopes to "bring a collaborative security approach" to campus.

He will show University organizations the vulnerabilities in their systems and what it may cost to fix them, he said.

Scatturo said he will then make recommendations.

He also noted that "security is not all technology" and that a comprehensive security plan also protects against human 1.

The University also recently hired lawyer Clayton Marsh '85 to examine privacy issues, though Marsh is not an expert in the field.

President Tilghman announced in August the creation of the position of information technology security officer after the admission scandal, in which Princeton admission officials used social security numbers to gain access to private data at Yale University.

Get the best of the ‘Prince’ delivered straight to your inbox. Subscribe now »

Princeton has already moved away from using social security numbers as default passwords on campus systems.

The search for an officer had been underway before the scandal, however. In the spring, the Priorities Committee, the University's budgeting arm, suggested $110,000 for an officer in the 2002-2003 budget.

Scatturo currently holds a similar position at nearby RCN Corp. and helped pioneer the idea of a security officer at several investment firms during the past 20 years.