InfoSec: Managing data

On a daily basis, there may be several types of private data that you access, and all of this data needs to be protected in a secure location. This data may include Personally Identifiable Information (PII), intellectual property, institutional data, or other information that needs to be kept secure.

As an institution, we must be aware of and prepared for possible threats to our data, such as social engineering, accidental disclosure, compromised accounts, etc.

Types of data

We categorize data into the following types:

Type 1: Restricted

Highest level of access control; confidential or personal information that is protected by law or policy; restricted to specific members in the department or others on campus. Also known as Personally Identifiable Information, or PII, this includes social security numbers, drivers license numbers, passport numbers, medical information, health insurance information, etc.

Type 2: Department data

Shareable with anyone in the department. It may include process or workflow documentation, financial reports or spreadsheets, and internal department project collaboration documentation.

Type 3: Campus data

Shareable with others on campus. It might include budget planning files shared by Finance with department Vice Presidents, etc.

Managing your files

After determining the type of data you have, you should consider how you will manage it. For example, where is the most appropriate place to store it, what is the most secure way to share it with others, and so on.

Go to InfoSec: Strategies and suggestions for file management to learn more about the options available to you.

Accessing computer resources from off campus

DePauw’s Virtual desktops and the Virtual Private Network (VPN) enables you to securely access the network and Internet from off campus using a Web browser that has an active Internet connection.

Go to Network: Learn About the Network to learn more.

Backing up your computer

Do not get caught without a way to recover your files in the event of an accident or virus attack. Scheduling routine backups for your computer can save you possible headaches down the road.

Go to Backing up your computer to learn about important files to back up, common options for backing up your computer, and recommendations on how often you should back up your files.

Data retention and destruction

Refer to the Record Retention and Document Destruction Policy section of the Employee Guide for details. Please contact your supervisor with any questions or concerns that you may have about data retention or destruction.

FERPA

Go to the Office of the Registrar website to learn about FERPA.

HIPAA

Go to the Human Resources Government Mandated Notices Web page to learn about the HIPAA Privacy Act.

Additional resources

Go to Data Classification Policy and Handling Recommendations to learn more.

Updated: 7/6/2021