Educause Security Discussion mailing list archives

Re: Data "Sharing" Policy


From: Joel Rosenblatt <joel () COLUMBIA EDU>
Date: Sat, 3 Sep 2011 08:24:00 -0400

Hi,

Here are some pointers to Columbia's policies

<http://policylibrary.columbia.edu/data-classification-policy>

<http://policylibrary.columbia.edu/encryption-policy>

<http://policylibrary.columbia.edu/social-security-number-ssn-and-unique-person-number-upn-usage>

You can fine other stuff at

<http://policylibrary.columbia.edu/node_browser/nodes_by_category/term/34>

Enjoy .. and good luck

Joel

--On Friday, September 02, 2011 5:58 PM -0400 Bob Kalal <kalal.1 () OSU EDU> wrote:

Ohio State's Institutional Data Policy addresses many of these issues. You can find it at 
http://cio.osu.edu/policies/institutional_data/

Bob Kalal
Director (Retired), Information Technology Policy
Office of the CIO
The Ohio State University

On Sep 2, 2011, at 10:40 AM, Kevin Casey wrote:

Good morning.  Does anyone have a written policy they could share governing how sensitive data should "move" across 
your organization?  We have a situation
where individuals/departments are (for example) collecting info from prospective students on their own via the Web.

We need a policy that not only addresses this use of home-grown forms, but also sending sensitive info via 
(unencrypted) email, etc., and even via
non-digital means (e.g. applications with SS#s in a briefcase taken off campus).  We also need to define what "sensitive," 
"confidential," etc. means in the
context of data....

We have an "acceptable use" policy that mentions this topic, but with inadequate specificity.


Thanks,

Kevin

__________________________________________
Kevin Casey
Executive Director
Information Resources
Phone:  (207) 941-7123
Fax:  (207) 941-7988
caseyk () husson edu
 Husson University
 www.husson.edu








Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel
Public PGP key
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x90BD740BCC7326C3


Current thread: