Secure Computing - Your Role
computing.msu.edu/secureIT
MSU provides the university community with a robust network and access to an array of information assets critical to the business and operations of the university.
Due to the sensitivity and regulations associated with much of this data, it is essential that every member of the MSU community work to protect it and minimize the occurrence of security incidents by:
Protecting Data
- Treat all sensitive data as a highly valuable asset and minimize the chance that it is released to unauthorized users.
- Identify sensitive data inputs, location, and sensitivity.
- Do not use Social Security numbers as an identifier.
- Encrypt private data sent across the network.
- Save sensitive data files to a network drive, not a personal computer.
- Restrict access to sensitive data to those who “need to know.”
- Avoid copies.
- Get rid of data no longer needed.
Carefully Dispose Sensitive Data
When you no longer need sensitive data, it is better to dispose of it than continue to account for it. Ensure data cannot be recreated and follow careful disposal best practices:
- Only store necessary data.
- Shred papers containing sensitive data.
- Follow the Best Practices in Disposal of Computers and Electronic Storage Media at lct.msu.edu/best practices.
- Sanitize hard drives of disposed computers to remove sensitive data.
Connect Safely
Sensitive data is more easily stolen when it is shared between users, so take note of the connection you use. Unapproved wireless networks, e-mail, and public computers are particularly vulnerable to security breaches.
- Use only MSU-approved networks and wireless access points.
- Do not e-mail private data, as messages can be intercepted.
- Use a Virtual Private Network (VPN) when off campus for a secure connection (vpn.msu.edu).
- Find out more about university guidelines regarding protecting sensitive data at computing.msu.edu/msd.
Be Prepared
In the event of a disaster or a security incident, do you know what to do? These events occur unexpectedly, so find out in advance how to respond:
- Report any known or suspected security incident (any known or suspected event or circumstance that results in the unauthorized release or exposure of sensitive information beyond the university’s span of control) to your management, your local technical support staff, and the ATS Network Security Team through the ATS Help Desk at (517) 432 6200.
- Learn about your school or department’s business continuity plans from your dean or department chair.
- Make regular system backups and test your system’s restore function; check with your technical support staff for details. Always check with your local technical support staff before implementing changes.
What Does a Security Incident Look Like?
A reportable incident occurs when (a) an unauthorized person is believed to have gained the ability to access confidential or proprietary data that is stored on a university data system, or (b) a person who is authorized to access confidential or proprietary data that is stored on a university data system misuses that data.
What is Confidential and Proprietary Data?
- Social Security number (SSN).
- Credit card number or debit card number.
- Bank account number, automated clearing house number, or electronic funds transfer account number.
- Driver’s license number.
- Name, address, and date of birth, when all three are used together.
- Student educational records protected by Family Educational Rights and Privacy Act (FERPA) or the MSU’s Guidelines Governing Privacy and Release of Student Records.
- Health information under the Health Insurance Portability and Accountability Act (HIPAA).
- Research data or results prior to publication or the filing of a patent application.
- Information subject to a contractual confidentiality provision.
- Security codes, combinations, and passwords.
Security While Traveling
Precautionary measures that travelers should follow to help safeguard sensitive date when traveling to any destination, foreign or domestic.
Detailed Travel Guide for Safe Computing
Detailed documentation of precautionary travel measures with additional information regarding the items in the Travel Guidelines Checklist.
For more information visit computing.msu.edu/msd and computing.msu.edu/secureIT.
