Privacy and Security Notice
Overview
The MAP (Mapping Articulation Pathways) platform protects student privacy in accordance with the Family Educational Rights and Privacy Act (FERPA) while maintaining robust security through Center for Internet Security (CIS) Controls Version 8.1. Our platform, used for Credit for Prior Learning (CPL) assessment, implements comprehensive data protection measures.
Data Handling and Privacy
- Collection: We collect essential student data (Name, Birthday, Email, Phone, Student ID) and CPL-related documents
- Usage: Data used exclusively for CPL assessment, with disclosure restricted to authorized parties
- Protection: All PII is encrypted in transit and at rest
- Access Control: Role-based access limited to authorized personnel with legitimate educational interest
Student Rights and Compliance
- Students can review/correct their data and withdraw consent through their institution
- Colleges maintain consent records and ensure FERPA-compliant data sharing
- Regular FERPA training for staff and comprehensive audit trails maintained
Security Framework
Our security framework aligns with industry standards including:
- CIS Controls Version 8.1
- Microsoft Azure Cloud Security Framework
Technical Measures:
- Azure cloud infrastructure with continuous security monitoring
- Regular vulnerability assessments and penetration testing
- Secure coding practices and ongoing security assessments
- Real-time threat detection and response
- Two-factor authentication (2FA) implementation launching December 9th, following regional training on December 3rd
Risk Management:
- Continuous compliance monitoring for education/cybersecurity regulations
- Regular security assessments and risk mitigation
- Comprehensive incident response planning
- Detailed security measure documentation
Commitment to Excellence
We exceed industry standards through:
- Strict adherence to CIS Controls Version 8.1
- Comprehensive data encryption protocols
- Continuous system monitoring and threat response
- Regular staff training on security best practices
- Detailed incident and security measure documentation
