Personal Identification Information

rachmavis

Hi -

I work in a K-12 environment where Google forms and sheets have been utilized for years. I am trying to transfer a few workflows to Smartsheet for better efficiency. The issue I am running into is PII. I need more than one data point to reference a student. My IT team does not think Smartsheet is secure enough - though I would be locking user access down.

Any thoughts or ideas?

Erin Horiuchi Green

Hello @rachmavis ,

I work in Pharma and we are able to utilize Smartsheet that is IT approved for specific operations.

Below is my holistic approach. You should have your Smartsheet CSM in the meeting with IT. Your Smartsheet CSM should have a technical resource (if needed) to address IT security concerns as these should have been addressed prior to contract installment.

1) Identify applicable Stakeholders: Leadership, Finance, Legal, HR, Compliance, IT, etc.
2) Discovery meeting with Stakeholders kick off only
3) Schedule break out meetings by Stakeholder Roles for requirement gathering
4) Demand Specification Form documentation
5) Meet with Stakeholders to review Demand Specification Form
6) Upon email approval, build, test and deploy

I actually create Test Scripts in Smartsheet housed in a folder in the same Workspace as the solution. That way it is easily accessible when IT Auditors want to review for security and sustainability of the solution.

Happy to have a discussion to help your frame your Smartsheet goals for adoption.

KPH

Does your IT team have a specific concern? There is a lot of info on smartsheet security here

https://www.smartsheet.com/legal/security?srsltid=AfmBOopcI3uT01XAVAJHUw5MvO_oinie0vSXyooDSUvivyuyk0Qc2HzqAnd

And here

https://www.smartsheet.com/trust/security?srsltid=AfmBOorUO6dBMd4XN8mq-6yF1MqKOazCcqrePZ1MFZ25Ws7awv17tJ1q

And that second link has an option to contact Smartsheet security team who could help address the concerns.

Erin Horiuchi Green

Hello @rachmavis ,

I work in Pharma and we are able to utilize Smartsheet that is IT approved for specific operations.

Below is my holistic approach. You should have your Smartsheet CSM in the meeting with IT. Your Smartsheet CSM should have a technical resource (if needed) to address IT security concerns as these should have been addressed prior to contract installment.

1) Identify applicable Stakeholders: Leadership, Finance, Legal, HR, Compliance, IT, etc.
2) Discovery meeting with Stakeholders kick off only
3) Schedule break out meetings by Stakeholder Roles for requirement gathering
4) Demand Specification Form documentation
5) Meet with Stakeholders to review Demand Specification Form
6) Upon email approval, build, test and deploy

I actually create Test Scripts in Smartsheet housed in a folder in the same Workspace as the solution. That way it is easily accessible when IT Auditors want to review for security and sustainability of the solution.

Happy to have a discussion to help your frame your Smartsheet goals for adoption.