Securely Storing & Sending Files
Are emails that are sent to students secure?
- Student emails to and from faculty, which use the cortland.edu email address, fall under Office 365. This service provided by Microsoft is governed under a SUNY wide contract which has specific protections related to FERPA and data security. Those emails are already secured.
Can I send student grade info to a student upon request via email?
- Yes, but should only be sent to a cortland.edu address. Information Resources cannot verify the secure identity nor the delivery of messages to non-cortland.edu email addresses.
Does research data with no PII need to be stored securely?
- Technically, that can be on a local hard drive. However, Information Resources would like to have a conversation about the safety of that data in terms of backups. Even "rolledup" or "anonymized" data can be harmful to the reputation of the faculty member or institution if compromised?
Does research data with PII need to be stored securely?
- PII can be different things. Some research with PII can be governed by law, if this is the case, that data absolutely needs to be stored on a Cortland server (U drive, shares drive or other Cortland server). Information Resources will help anyone who deals with this type of research. Often the presence of PII is enough to put it at a level which needs to be stored on a Cortland server, however, when combined with other data elements it raises to a level where additional security may be required. Especially when dealing with children under 13 years old, health data, etc. Please contact Information Resources if working with PII data.
Do electronic files of graded papers need to be stored securely?
- These should be stored on a U drive or Shares drive.
Do electronic files of papers not graded (keep for assessment or records reasons) need to be stored securely?
- This may fall under FERPA due to a student’s names or information being on it.
Department Assessment files – which may contain PII but do not contain “grades”
- It is best practice to store department assessment files that may contain PII to a secure location such as the U drive or Shares drive.
Back-up hard drives not connected to your computer and kept in your locked office
2019-07-11 11:16:36.084 - SAWS
- Backup hard drives, even under lock and key, can have a tremendous amount of data on them. That data would be better in a secure environment. Typical external drives are also very prone to physical failures, dropped or even bumped drives can result in loss of data. However, Information Resources would like to work with faculty and staff to make sure their data is safe. Some faculty and staff have more data than a U drive can allow, but it does not mean IR cannot work with them on a safe storage solution. Please contact Information Resources if you have questions about data security or storage solutions.