JANUS
Emails
Details
Comments
Audit
From Name
" />
From Email
To Name
" />
To Email
Subject
Date Sent
Message ID
Message
<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Hi Jeff-</div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof"> Forwarding over from the NDSU account in case there are issues with the NoteForge email. </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof"> Answers, Data Dictionary, and SOC2 reports are available at <a id="LPlnk170836" href="https://noteforge.com/legal/compliance"> https://noteforge.com/legal/compliance</a>. </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof"> Please let me know if there is anything else you need.</div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof"> -Kyle</div> <div id="Signature"> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <p style="direction: ltr; background-color: rgb(255, 255, 255); margin: 0in; font-family: Calibri, sans-serif; font-size: 11pt;"> <span style="font-family: Arial, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">Kyle Vanderburg, DMA</span></p> <p style="direction: ltr; text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0in;"> <span style="font-family: Arial, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">Composer in Residence / Asst. Prof. of Practice<br> Challey School of Music<br> <b>North Dakota State University</b></span></p> <p style="direction: ltr; text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0in;"> <span style="font-family: Arial, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">Music Ed. 115C / Dept. 2540, PO Box 6050 / Fargo ND 58108-6050</span></p> <p style="direction: ltr; text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0in;"> <span style="font-family: Arial, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);"><a style="color: rgb(0, 0, 0); margin: 0px;" data-auth="NotApplicable" class="x_OWAAutoLink" id="OWAe85089d6-5160-56ac-96ac-9c25160e9829" href="http://www.ndsu.edu/">ndsu.edu</a></span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> | <a style="color: rgb(0, 0, 0); margin: 0px;" data-auth="NotApplicable" title="https://kylevanderburg.com" class="x_OWAAutoLink" id="OWA7be8051a-bcd3-b0f3-7c69-6f80c1819742" href="https://kylevanderburg.com/"> kylevanderburg.com</a> | <a style="color: rgb(0, 0, 0); margin: 0px;" data-auth="NotApplicable" title="https://ndsucomposition.com" class="x_OWAAutoLink" id="OWA14b6911e-ded0-e41e-83cf-003e5fe0081c" href="https://ndsucomposition.com/"> ndsucomposition.com</a></span></p> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> </div> <div id="appendonsend"></div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <a name="x__MailOriginal"></a></div> <div id="x_divRplyFwdMsg"></div> <div id="x_x_Signature"></div> <div id="x_x_appendonsend"></div> <hr style="direction: ltr; display: inline-block; width: 98%;"> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <b>From:</b> Kyle Vanderburg <kyle@noteforge.com><br> <b>Sent:</b> Thursday, July 31, 2025 11:34<br> <b>To:</b> Gimbel, Jeff <jeff.gimbel@ndsu.edu><br> <b>Subject:</b> Fw: NDSU Vendor Security Review Request - Liszt - 06-04-2025</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Forwarding over; some additions to the below commentary:</div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <ol style="direction: ltr; margin-top: 0px; margin-bottom: 0px; list-style-type: decimal;" data-editing-info="{"applyListStyleFromLevel":false,"orderedStyleType":1}" start="1"> <li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <div style="direction: ltr;" role="presentation">As a result of this security review, I have corrected many vulnerabilities with cross-site scripting and SQL injection.</div> </li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <div style="direction: ltr;" role="presentation">We are now using Aikido and Snyk regularly to identify vulnerabilities in the codebase. </div> </li></ol> <div id="x_x_x_Signature"> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> =======================</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Kyle Vanderburg, DMA</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Composer & Sound Artist</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <span style="background-color: rgb(255, 255, 255);">- <a style="margin: 0px; background-color: rgb(255, 255, 255); text-align: left;" data-auth="NotApplicable" class="x_x_x_OWAAutoLink" id="OWA4fd5b88a-3b4b-2dbf-07b9-da8e29d13105" href="https://kylevanderburg.com/"> https://kylevanderburg.com</a></span></div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Chief Creative Officer, NoteForge</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> - <a data-auth="NotApplicable" class="x_x_x_OWAAutoLink" id="OWA32b7471a-2ef2-9a2e-1072-7e2c655f677f" href="https://noteforge.com"> https://noteforge.com</a></div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Composer in Residence, NDSU</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> - <a data-auth="NotApplicable" class="x_x_x_OWAAutoLink" id="OWA35ac66de-b57c-1e1b-be31-015bef17166c" href="https://ndsu.edu/music"> https://ndsu.edu/music</a> </div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> </div> <div id="x_x_x_appendonsend"></div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <hr style="direction: ltr; display: inline-block; width: 98%;"> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <b>From:</b> Kyle Vanderburg <kyle@noteforge.com><br> <b>Sent:</b> Thursday, June 12, 2025 14:38<br> <b>To:</b> Gimbel, Jeff <jeff.gimbel@ndsu.edu><br> <b>Cc:</b> Iverson, Jacoba <jacoba.iverson@ndsu.edu>; Vanderburg, Kyle <kyle.vanderburg@ndsu.edu>; bill law <bill.law@ndsu.edu><br> <b>Subject:</b> Re: NDSU Vendor Security Review Request - Liszt - 06-04-2025</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Hi Jeff,</div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Attached please find the following:</div> <ol style="direction: ltr; margin-top: 0px; margin-bottom: 0px; list-style-type: decimal;" data-editing-info="{"applyListStyleFromLevel":false,"orderedStyleType":1}" start="1"> <li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <div style="direction: ltr;" role="presentation">Answers to your requested information.</div> </li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <div style="direction: ltr;" role="presentation">The Company Data Dictionary, for database tables that interact with NDSU's data in Liszt.</div> </li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <div style="direction: ltr;" role="presentation">An SOC2 compliance report exported from Aikido. </div> </li></ol> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> A few notes on the SOC2 report</div> <ul style="direction: ltr; margin-top: 0px; margin-bottom: 0px; list-style-type: disc;" data-editing-info="{"applyListStyleFromLevel":false,"unorderedStyleType":1}"> <li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <div style="direction: ltr;" role="presentation">"Droplet Firewall Setup" is in reference to a new server (that does not process NDSU data) that did not have a configured firewall at the time of reporting. That has since been corrected. </div> </li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <div style="direction: ltr;" role="presentation">The report does identify some issues (SQL injection possibility, SSRF attack vulnerability) that are being addressed this summer. </div> </li></ul> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Liszt has not undergone a vulnerability/penetration test aside from Aikido (https://aikido.dev). If a more substantial test is required, that can be arranged. </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> -Kyle</div> <div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div id="x_x_x_x_Signature"> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> =======================</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Kyle Vanderburg, DMA</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Composer & Sound Artist</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <span style="background-color: rgb(255, 255, 255);">- <a style="margin: 0px; background-color: rgb(255, 255, 255); text-align: left;" data-auth="NotApplicable" class="x_x_x_x_OWAAutoLink" id="OWA1674eccd-bce8-56ad-84b6-8477b95de593" href="https://kylevanderburg.com/"> https://kylevanderburg.com</a></span></div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Chief Creative Officer, NoteForge</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> - <a data-auth="NotApplicable" class="x_x_x_x_OWAAutoLink" id="OWA255f0d28-774a-0a78-22aa-b32433066560" href="https://noteforge.com"> https://noteforge.com</a></div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> Composer in Residence, NDSU</div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> - <a data-auth="NotApplicable" class="x_x_x_x_OWAAutoLink" id="OWA392ee993-2b25-2024-2b88-6ce25cf653b7" href="https://ndsu.edu/music"> https://ndsu.edu/music</a> </div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> <div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <br> </div> </div> <div id="x_x_x_x_appendonsend"></div> <hr style="direction: ltr; display: inline-block; width: 98%;"> <div id="x_x_x_x_divRplyFwdMsg"> <div style="direction: ltr; font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> <b>From:</b> Gimbel, Jeff <jeff.gimbel@ndsu.edu><br> <b>Sent:</b> Wednesday, June 4, 2025 12:00<br> <b>To:</b> Kyle Vanderburg <kyle@noteforge.com><br> <b>Cc:</b> Iverson, Jacoba <jacoba.iverson@ndsu.edu>; Vanderburg, Kyle <kyle.vanderburg@ndsu.edu><br> <b>Subject:</b> NDSU Vendor Security Review Request - Liszt - 06-04-2025</div> <div style="direction: ltr;"> </div> </div> <div style="direction: ltr; font-size: 11pt;">Hello, Liszt team,<br> <br> <br> I am a Senior Security Analyst at North Dakota State University. In order to protect the Students, Staff, and Faculty as well as the Institution of NDSU, we request a Security review of your product or services that you are offering.<br> <br> <br> Please Provide the following Information: (note, incomplete information may lengthen the process and prevent a timely review)<br> <br> IT Security Office Contact Information:<br> <br> <br> Statement of which regulation or standards the company complies with:<br> <br> Company Security Policies:<br> <br> Company Privacy Policy:<br> <br> Company Administrative Logical and Physical Control Policies:<br> <br> How and to whom NDSU data may be disclosed to and why:<br> <br> Company Data Classification:<br> <br> Company Data Dictionary:<br> <br> Network Firewall and IPS Policies:<br> <br> Data Encryption and Isolation Policies:<br> <br> Role or Account Security Policies:<br> <br> Multifactor Authentication Policies:<br> <br> Summary of Incident Response Plan:<br> <br> Summary of Business Continuity Plan:<br> <br> Summary of Disaster Recovery Plan:<br> <br> Summary of Employee Background Check Policies:<br> <br> Summary of Employee Confidentiality Agreement Policies:<br> <br> Summary of Employee Training:<br> <br> A letter of attestation of the company's latest Vulnerability/Pentest Attestation<br> <br> <br> A SOC2, or HECVAT (<a data-auth="NotApplicable" class="x_x_x_OWAAutoLink" id="OWAbfdd912d-6cb5-2c63-1b8d-a83340ef04f2" href="https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit">https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit</a>) from your Institution Point of View would make this process much quicker and would be greatly appreciated.<br> <br> The Following Statements Need to be attested to if there is any FERPA Data Associated with the Service:<br> <br> <br> . Liszt agrees not to re-disclose any information unless it is permitted by NDSU or within the rules of FERPA<br> . Liszt agrees that the data housed is owned by NDSU and my institution will provide a way to audit and access that information<br> . Liszt agrees that data will only be housed in the United States<br> . Liszt gives NDSU direct control of the deletion of PII<br> . Liszt must obtain NDSU's consent to, or provide NDSU notice of changes <br> . Liszt has strict boundaries between education and commercial use of student data<br> <br> * Can you also provide the breach notification protocols for Liszt<br> <br> <br> <br> <br> Jeff Gimbel<br> Senior Security Analyst / Information Technology<br> NORTH DAKOTA STATE UNIVERSITY<br> p:701.231.6730 / <a data-auth="NotApplicable" class="x_x_x_OWAAutoLink" id="OWAd10f768b-9697-9c17-4f20-a0690170b440" href="http://www.ndsu.edu"> www.ndsu.edu</a><br> <br> <a data-auth="NotApplicable" class="x_x_x_OWAAutoLink" id="OWA506cc08d-4aa6-dbf9-8e87-1c3bd173f0b7" href="https://filetransfer.ndsu.edu/filedrop/jeff.gimbel@ndsu.edu">https://filetransfer.ndsu.edu/filedrop/jeff.gimbel@ndsu.edu</a><br> <br> <br> <br> Book time with Gimbel, Jeff: Book time<br> <br> <br> </div> </body> </html>
Message GUID
https://janus-public.vanderburg.app/email/57E682C8-84D0-4DC0-BF05-FD93B96BD422/
