Social Security Number (SSN) scanning protects the privacy of the Texas A&M community. All Texas A&M information systems should be examined to reduce the risk of SSN exposure.
Standard Administrative Procedure Status
The requirements for Social Security number scanning published in a Standard Administrative Procedure (SAP) 29.01.99.M1.29.
Every information system on campus should be scanned for SSNs. If SSNs are present, they should be removed. Documentation is required for any information system that has a compelling need to store SSNs and for systems that cannot be scanned for SSNs (e.g. instruments with embedded computer systems).
Annual ISAAC reporting will require verification of documentation and scanning.
To scan your computer for SSNs, Texas A&M recommends the following 2 programs.
Identity Finder
This easy to use Windows-based commercial product can scan local drives, mapped drives, and email. The license key for this product may be purchased from SELL based on FTE count. To use the product, purchase the license key, and download the software.
- » To purchase the license key, visit:
http://identityfinder.tamu.edu- » To download the software, visit:
http://www.identityfinder.com/enterprise/- » For recommended settings, visit:
http://security.tamu.edu/SSN_Scanning_Settings.php- » To view Identity Finder's web help pages, visit:
http://www.identityfinder.com/help/- » Useful notes about Identity Finder:
- By default, Identity Finder:
- Searches for SSNs, Credit Card Numbers, and Passwords
- Shows all search results, including passwords, in plain text
- Searches only for SSNs with appropriately placed dashes
- Searches only the 'C:' drive
- Quarantine feature does not work
- » For additional help with Identity Finder, contact Help Desk Central:
- Phone: 979.845.8300
- Email: helpdesk@tamu.edu
Spider
This open source software from Cornell will scan computers running Windows, Mac OS X, or Unix. While open source software is free to use, it is often less user friendly than commercial software.
- » To download Spider visit:
http://www2.cit.cornell.edu/security/tools/- » For helpful information about using Spider visit:
http://www2.cit.cornell.edu/security/tools/- » For additional help with using Spider contact Help Desk Central:
- Phone: 979.845.8300
- Email: helpdesk@tamu.edu
Information Systems with SSNs
Information systems that have a compelling need to store and use SSNs should be documented.
Specialized Information Systems
Specialized Systems that cannot be scanned for SSNs should be documented.
SSN Scanning Frequently Asked Questions