�һ�������Ƶ

I graduated in Computer Science from �һ�������Ƶ in the summer of 1987 and started working in ITS two days after graduation. I have been with ITS for over 34 years.

There are many ways that my previous work has helped me with my current position as an application developer. One of my first jobs was like the current TSP (Technical Support Professional) position. It was a great early job where I learned so much about PC hardware and software as well as the �һ�������Ƶ community. In the beginning we did everything command line. I still use these commands and am glad I became proficient many years ago. It is also where I learned the customer service and troubleshooting skills that I have used over the years. I have great respect for what the TSPs do for the campus. What I learned as an email administrator helped me later in developing an application that generates emails. All the utility scripts I wrote during the early years helped me gain skills and recognize that application development is what I wanted to do full-time.

I have been working with the Office of Clinical Experiences in the College of Education and Professional Services. I developed a system for the students to request and be placed in schools for their observation and practicum courses. I also created an online form and workflow for the Undergraduate Teacher Education Program application process.

I am proud of my first PHP application which was converting the Dental Hygiene Clinical Evaluation System from a Lotus Notes application to a PHP/Oracle application. I had to learn PHP and Oracle, work with an unfamiliar medical/technical field, and convert a production system. This was in 2009 and it confirmed for me that I could do application development.

I hope that ITS will continue to find ways to maintain the work/life balance for its employees. The COVID crisis and ongoing security threats have added to the workload and there is a new normal for the foreseeable future. I hope the work/life balance can evolve and continue despite the growing challenges and changes.

Outsourcing has grown over the years to help keep pace with the needs of the campus. I hope there will continue to be opportunities for in-house application projects. I was fortunate to have training when I started working with a new (to me) technology which was invaluable. I hope these training opportunities will also continue to create a foundation for succeeding with new technologies.

When I started working, ITS was located on one floor of Hughes Hall and it was easy to know everyone. Now that ITS is much larger and more scattered, I am glad to see opportunities such as the 'Women + Allies in Tech' group to promote communication and meeting others in the department. I hope that WIT will continue and there will be other similar efforts.

Over the years I have been fortunate to have mentors who helped me grow in technical abilities as well as personally. Herb Ketchum was a mentor during the early days I worked as a TSP and supported some of the first LANs on campus. Thomas Symborski was a mentor when I started learning how to develop a PHP-based web application. Grace Little was a mentor for me through her personal values, leadership style and interpersonal skills. I look back in gratitude to them for their exceptional skills and accomplishments and what I was able to learn from them.

A new job is always challenging, and technology adds its challenges to the mix. This first job may or may not be exactly what you want to do. Either way there will be more opportunities - some of which may not even exist yet. In 1987, I was hired to do ad-hoc reporting on the mainframe. That lasted only a short time. I moved to a new project that started with putting PCs in the President's Office with connectivity. Later I worked with a new initiative to support the Macs on campus. Then I was an email administrator for Lotus Notes and finally a web application developer. None of this could I have seen when I sat down at my Telex terminal in Hughes Hall on my first day.

Know who you are and what your strengths and interests are. Use your strengths and follow your interests. Learn from those who have different strengths.

I will be with the University a year end of March which would be a year in Higher Education. My background is with DoD which has very specific compliance requirements and no major deviations. Coming to work in Higher Education has presented a new set of challenges that I was excited to take on. I work in Risk and Compliance which is not always the priority when an organization is looking for a solution or wants to seize an opportunity. Higher Ed and specifically �һ�������Ƶ, is giving me the opportunity to really expand my knowledge and challenge myself. I now take on data security, privacy governance and ethical use, data governance, information security programs, policy development, IT risk management and compliance, and anything else that comes my way. I am really interested in the CMMC initiatives and enhancing our Privacy Program. I believe in being a lifelong learner, and this position has accepted that challenge.

Every position I have held has given me a different perspective of how things can be done. I have been able to take something from all my previous experiences, even the bad ones, and found those experiences affect process changes and solutions in my current position. I have also learned that the people at the table are not smarter than me, they have been doing things longer or been with that organization longer, and I will be there.

I have recently started to see risk and compliance added to more projects, even in small ways, which is great to see! This means people are having conversations relating to IT Security, risk, and compliance! *I call this winning hearts and minds. 😊

One project I am working on is System Risk Assessment Business Process Improvement and updates. We have around 60 risk assessments when you itemize them to update. Some may view that as a compliance check box or audit check box, however there is a much bigger picture. I am working with departments across the University and having conversations relating to risks and risk levels, data, privacy, security controls and more. These conversations are with University staff and faculty in person as a shared model. I use these opportunities for in person training and awareness regarding data handling and best practices, account management, and cover other threat vectors or privacy concerns relating to University data. Having current documentation is great and gets us a pass on audits, but the larger win is the conversation with departments outside of ITS. Our boundary of security extends beyond the physical University but to our cloud hosted systems as well. I am working with departments to understand, identify, document, and create plan of actions for these systems.

I haven't been with the University long, so I don't have too many under my belt. I think it is safe to say, when the Risk Assessment project is complete, that will be the one I am most proud of. Although, risk assessment is continuous, having a baseline and the education and awareness will lead to more acceptance of a shared model. It's a culture shift.

Security as a shared model. Regulations and threats change, the University environment is in a constant state of flux, it becomes more and more important to have security shared across departments as well as top tiered. There's a saying in ITS, "Security is baked in not bolted on". This becomes truer as Privacy continues to go beyond governance and into ethics, as regulations change, and more solutions or data are moved to the cloud; IT security should be shifting to the start of conversations.

I have my own "Champion" here, but Joanna Gramma as a mentor. I found her through someone on an Educause Slack station. I was asking if anyone had their CIPT. Next thing I knew, Joanna and I had an almost 2-hour call. She has all the certifications I am striving for, experiences, education, and a working mom and wife. She was so down to earth and honest. I appreciated that. She agreed family will sacrifice for work at times and work will sacrifice for family sometimes, that's the integration vs. a balance. She was so refreshing.

Find a champion, male or female, that is in a position or area you would like to see yourself in. This person may have advice or experiences to share that can help guide you and navigate your career here. Read, read a lot, read anything available relating to your new position such as policies, articles, etc. Get on a mailing lists for things relating to your field to keep you current with trends and the conversations. IT is always changing and so is this environment, stay on top of your skills and enhance your skills. Find ways to self-study. Trust me, as a working mom who commutes, you can find time. I find webinars that I listen to during my commute, I receive article updates from certain blogs on threats, etc.

Talk yourself up! You got the job for a reason. Don't be apologetic, own your position and your confidence.

AND... take time off when you need it. Burnout is easy in IT, especially if you have a family at home. As a mom, my job doesn't stop when I'm off, my job just changes. I look at emails at home, etc. so when I need time off, I take it and don't feel guilty about it. It's there for a reason and you'll be more focused and ready when you return. I don't think there is a work-life balance, I think there is a work-life integration. Finding a healthy one is key.