Data Security and Management

What is the Protecting Private Data Standard?

The Protecting Private Data Standard, developed by University OIT Security, outlines the responsibility for private data and the steps that must be taken to ensure that the devices containing this data are secure.

Data Security and HIPPA training coordinator:

If you have questions regarding data security or believe that
you or someone whom you work with needs data security training,
please contact the Department data security coordinator: Carla
Bates bates014@umn.edu

Security policies

University policy

College policy

Department procedures for security compliance

Encrypting laptop

  • Macs -
    • File Vault information
    • Sign off sheet

What is AD from University and/or CLA-OIT?

During the spring and summer of 2008 the College of Liberal Arts is converting from a Novell file server system to the new university-wide Active Directory system.

Active Directory is a file serving system that allows users to save their computer files to a safe and secure network file server. An additional beneift of Active Direcotry is the ability to access your file from any computer that can connect to Active Directory. Whether at home or on the other side of the planet, if you can connect to the Internet you can connect to your data on the Active Directory.

Glossary of data security terms:

VPN (Virtual Private Network). Using a computer over VPN provides the same security as being on campus. Use VPN whenever you are off campus and accessing University-related files and/or databases.

Active Directory (AD) is a set of services running on network servers that provide a framework for things like authentication for your desktop computer, network-based storage services, and computer administration.

Encryption is the conversion of data into a form, called ciphertext, that cannot be easily understood by unauthorized people.

Decryption is the process of converting encrypted data back into its original form, so it can be understood.

HIPPA (Health Insurance Portability and Accountability Act of 1996) requires us to implement processes with respect to protected health information as well as inform individuals about how we protect their information.