First updated Jan 20, 2009, using data for calendar 2008, generally speaking.
The material here is very raw in some cases. The stories they tell will mature and come into focus over the month of January.
ITSS
The lack of anything related to Data Security in the Stats from FY06 is probably due to the fact that 2004-2006 were not big years for MIT handling Data Incidents in any organized way, although we had a few biggies in there (see comps below). Still, I'm not really sure how to report on this important for a one-line stat, but here's the long version.
During calendar 2008, 9 data incidents involving sensitive data were reported to/handled by the Data Incident Response Team, coordinated by ITSS. One involved an MIT partner, the MITFCU, which was not investigated by DIRT. Across the remaining incidents, the data included personally identifying information (SSN) as well as financial information, credit card information, student education records, and MIT confidential business information. Only one incident -- involving one person's SSN -- was deemed to require notification. In all the others, there was no evidence indicating that acquisition of data had occurred.
We concluded that none of the incidents was the result of a malicious attack specifically on the data sources. Two incidents involved lost or stolen devices, the remaining seven were more or less preventable or avoidable, and were the result of programming or device configuration errors, or simple human error.
Previous Years:
CY 2004 = 1 incident => 16k notices
CY 2005 = 1 incident => 100 notices
CY 2006 = 4 incidents => 1000 notices; 10k credit cards reported to banks
CY 2007 = 5 incidents => 0 notices
-- Tim
Pubs
The IS&T Publishing Team maintains 2,100 pages of web-based IS&T information and documentation. During FY09, we are on track to process 2,540 content updates. Background The IS&T Publishing Team publishes documentation in support of MIT products and services. Our 2,100 pages of content can be found in the IS&T Website and multiple On-Line Help systems. In Q1 & Q2 of FY09, we published 1,272 updates, placing us on target for 2,542 updates by the end of the FY09.
Mark Wiklund
Software Deb and I have been looking for Office, XP and Vista numbers, but have come
up empty in the short time. I also remembered that we should be including
Student Matlab, but again, do not have the stats filed away.
I think we should go forward with the numbers we have from wserv, the VSLS
numbers (7,000), VMware (1,740) and the best guess I can generate off the
top of my head of 8,000 for Office, XP and Vista downloads. That would also
probably be an ok estimate which includes the licenses that get distributed
through the SW liaisons to whom we mail CD/DVDs for those products. I seem
to recall about 1,000 downloads per quarter for Student Matlab, so 4,000
total.
Please round to the nearest 1,000 and indicate that of that total 7,000
require hands-on processing and the vast majority are self-service systems.
We should pull the supported software products for this iteration.
Help Desk
120 calls / day average withn the ACD. 60% of Cases created done by telephone. Cases created per day abotu 100.
75 cases created per day, taken over the year. 40% of that is 30. 245 working days per year. 100 emails per day (@ 3 per case per day). Even call it 200. Walkin interactions are at 20 per day.
Likely we should use 300 interactions per day, not 400, until we're more careful about the numbers.