October is National Cyber Security Awareness month, an opportunity to remind everyone of the need to protect critical data and the provisions associated with the handling of such data.
Critical data requires special care and handling, especially when inappropriate handling of the information could result in:
- Criminal or civil penalties
- Identity theft or personal financial loss
- Invasion of privacy, and/or
- Unauthorized access to this type of information by an individual or many individuals
Critical data requires the very highest level of protection. The following types of data are classified as critical:
- Social security numbers
- Credit card numbers
- Debit card numbers
- Bank account or other financial account numbers
- Driver’s license numbers
- State ID card numbers
- Student loan information
- Protected health information or individually identifiable health information relating to past, present, or future conditions, provisions of health care, and payment for the provisions of health care
- Foundation donor data
- Passwords, passphrases, PIN numbers, security codes, and access codes
Indiana University has specific policies and procedures regarding the collection, storage, and transmission of critical data. The collection of such data requires approval, notification, and consent. After these conditions have been met, critical data in electronic format can only be stored on a secure file server. It cannot be stored on a desktop workstation, laptop, PDA, USB drive, flash drive, or any mobile/media device unless (a) the information is properly encrypted on the device and (b) you have received proper prior written approval confirming a critical business need to do so. You must use an approved encryption method when electronically transmitting critical data.
Paper records containing critical data must be kept in locked file cabinets/storage rooms or otherwise access controlled.
If you or your office handle critical information, please take time to review “Actions you can take to secure sensitive data.”
Contact the UITS Support Center at (574)520-5555 or helpdesk@iusb.edu if you have any questions or need guidance regarding the collection, storage, or transmission of critical data.
University Information Technology Services
IU South Bend