How to check for ISAT and GCN compliance

ISAT

To determine a person’s ISAT compliance, examine the following attributes when returned by UH Login or LDAP:

Attribute	Value of attribute	Meaning
uhReleasedGrouping	`hawaii.edu:store:uhims:general:isat-compliant`	Person is currently ISAT compliant. You only need to check this one if you do not need to know the ISAT completion or expiration date.
uhReleasedGrouping	`hawaii.edu:store:uhims:general:isat-compliant-renew`	Person’s ISAT will expire in 30 days or less.
uhAcknowledgement	`uhInformationSecurityAwarenessCertification=YYYYMMDDThhmmss`	Person completed the ISAT on YYYYMMDDThhmmss. THIS DOES NOT NECESSARILY MEAN THAT THE ISAT WILL EXPIRE ONE YEAR FROM THIS DATE. See expiration date below.
uhAcknowledgement	`uhInformationSecurityAwarenessCertification<YYYYMMDDThhmmss` (this value will be deployed in late February 2024)	Person’s ISAT will expire on YYYYMMDDThhmmss. The expiration date is either one year from the last ISAT completion or one year from the prior ISAT expiration date, whichever is later. Doing this ensures that we do not shorten the ISAT year for people who renew early.
	None of the above values	The person is not ISAT compliant. The person did not take the ISAT recently or the ISAT has expired. There is no date provided for the most recent ISAT completion or expiration.

The GCN does not expire unless the person leaves the University. The need to acknowledge it is referenced in the ISAT.

Attribute

Value of attribute

Meaning

uhReleasedGrouping

hawaii.edu:store:uhims:general:gcn-compliant

Person is currently GCN compliant.

You only need to check this one if you do not need to know the date that the GCN was acknowledged.

generalConfidentialityNotice=YYYYMMDDThhmmss

Person acknowledged the GCN on YYYYMMDDThhmmss.

None of the above values

The person is not GCN compliant.

The person has not acknowledged the GCN or no longer has any association with UH.