University Policies, Procedures, and Business Practices
Business Practices
- Are there rules concerning the security of University laptops outside of the office?
- Will the University provide a shredding service for paper records?
- Should business keys (for the office) be kept separate from personal keys (for home)?
Other
Policies
- Is there a deadline for conforming to the increased security policies (e.g., removing SSNs from documents)?
- What are the consequences of not adhering to the policy/policies? What happens if an individual views the training and is instructed to run the Sensitive Number Finder (but doesn’t comply) and his/her computer is stolen compromising sensitive information? Are there penalties for not following security directives?
- What types of records are student employees not allowed to access?
Social Security Numbers
- What should we do with our copies of forms from other departments (HR, payroll) which require SSNs? Is it sufficient to blackout the SSN and still keep a copy?
- What would be the approved method to removesensitive information from hard copies of forms?
Training
