Information SecuritySeminar

Data and Technology Service

What is confidential data?

Institutional Data•Institutional Data are all of the data and records held by the University, in any form or medium, for the administration, operation, or governance of the University or any unit of the University.

Confidential Data•Institutional Data that could, by itself or in combination with other such Data, be used for identity theft or related crimes.•Institutional Data whose public disclosure is restricted by law, contract, University policy, professional code, or practice within the applicable unit, discipline, or profession.•Records of the University’s security measures.•Institutional Data whose value would be lost or reduced by unauthorized disclosure or by disclosure in advance of the time prescribed for its authorized public release, or whose unauthorized disclosure would otherwise adversely affect the University financially.

Policies

1. You can find related university polices from ITSsite

2. You can find college policy from this web page3. All college staff are required to attend sensitive data

awareness seminar every three years.

4. Unit supervisors/unit administrators are responsible for implementing training and oversight procedures.

Responsible Use Requirements

1. Only use institutional data for university businesses. 2. Minimize the potential for improper disclosure or misuse.

3. Users are individually responsible for the security of data.

What to do?

• Evaluate work tasks• Design processes to reduce or eliminate

risk• Review the process regularly

What process to watch for?• Collecting• Storing• Transmitting/transfer• Disposal

Where to look for sensitive data?Digital format• Laptop computers, Desktop computers• Phones, thumb drives• Network drives, web content • Old documents stored in file servers• Email attachments• Social networking sites

Paper format• Sticky notes, notepads, paper files• Receipts• PAN forms and other official documents• Travel documentation

Discussion?

What question(s) do you have regarding safe guarding institutional data?

What practices do your use to safe guard institutional data?

* If you do have questions or experiences to share, please contact college Data and Technology team.