How to check for ISAT and GCN compliance

ISAT

To determine a person’s ISAT compliance, examine the following attributes when returned by UH Login or LDAP:

Attribute

Value of attribute

Meaning

Attribute

Value of attribute

Meaning

uhReleasedGrouping

hawaii.edu:store:uhims:general:isat-compliant

Person is currently ISAT compliant.

You only need to check this one if you do not need to know the ISAT completion or expiration date.

uhReleasedGrouping

hawaii.edu:store:uhims:general:isat-compliant-renew

Person’s ISAT will expire in 30 days or less.

uhAcknowledgement

uhInformationSecurityAwarenessCertification=YYYYMMDDThhmmss

Person completed the ISAT on YYYYMMDDThhmmss.

THIS DOES NOT NECESSARILY MEAN THAT THE ISAT WILL EXPIRE ONE YEAR FROM THIS DATE. See expiration date below.

uhAcknowledgement

uhInformationSecurityAwarenessCertification<YYYYMMDDThhmmss

(available after 2/7/2024)

Person’s ISAT will expire on YYYYMMDDThhmmss.

The expiration date is either one year from the last ISAT completion or one year from the prior ISAT expiration date, whichever is later. Doing this ensures that we do not shorten the ISAT year for people who renew early.

You should NOT perform your own calculations of ISAT expiration = ISAT completion + 1 year. It can be incorrect for people who renew early, and you should not be hard coding the one-year ISAT policy into your application. Let us figure out what the current logic is and provide the expiration date here.

 

None of the above values

The person is not ISAT compliant.

The person did not take the ISAT recently or the ISAT has expired. There is no date provided for the most recent ISAT completion or expiration.

GCN

The GCN does not expire unless the person leaves the University. The need to acknowledge it is referenced in the ISAT.

Attribute

Value of attribute

Meaning

Attribute

Value of attribute

Meaning

uhReleasedGrouping

hawaii.edu:store:uhims:general:gcn-compliant

Person is currently GCN compliant.

You only need to check this one if you do not need to know the date that the GCN was acknowledged.

uhAcknowledgement

generalConfidentialityNotice=YYYYMMDDThhmmss

Person acknowledged the GCN on YYYYMMDDThhmmss.

 

None of the above values

The person is not GCN compliant.

The person has not acknowledged the GCN or no longer has any association with UH.

For some background information, see also https://uhawaii.atlassian.net/wiki/spaces/UHIAM/blog/2021/09/09/13402665