Who is trained about what kinds of information security procedures?

The level of training one receives depends on his/her position within the University:

  • All faculty members and those staff members who work with computers will be asked to view the online training module.
  • Staff members who don’t work with computers will attend training sessions (probably at staff meetings) that will cover the areas of information security that apply to their specific situations.
  • Student employees that work with computers will be expected to view the same online training as staff.
  • New employees will be contacted soon after hiring and asked to view the online training, if appropriate to their position.
  • Employees who are not physically on campus will also be asked to view the online training, if appropriate to their position.
  • Volunteers who have access to sensitive data should be required to view the online training by the University office overseeing their work.
  • Specialized training such as FERPA or HIPAA is mandated by federal law. The data stewards for the data protected bythese regulations will require anyoneaccessing that data to complete the special data handling training.