The Prison University Project provides higher-education programs to inmates at San Quentin State Prison. Working with a rotating faculty consisting of mostly volunteer instructors, all of whom require security clearances to work inside the prison, PUP collects and stores personally identifying information on hundreds of individuals. We worked with PUP to inventory and categorize the data they were collecting, investigated the security practices of the vendor and cloud services they were using, and performed a fit-gap analysis to determine appropriate storage practices for sensitive data.
After developing the framework, we provided documentation and training for PUP staff on data security risks, and appropriate business practices to protect sensitive information.
Services provided
- Strategic consultation
- Data security framework development
- Data inventory and classification
- Vendor fit-gap analysis
- Business process development
- Staff training on data security requirements
- Data migration