Spring 2021 Guide and COVID-19 information

Documentation

Securely Storing & Sending Files


Are emails that are sent to students secure?

  • Student emails to and from faculty, which use the cortland.edu email address, fall under Office 365.  This service provided by Microsoft is governed under a SUNY wide contract which has specific protections related to FERPA and data security. Those emails are already secured.  

 Can I send student grade info to a student upon request via email?

  • Yes, but should only be sent to a cortland.edu address.  Information Resources cannot verify the secure identity nor the delivery of messages to non-cortland.edu email addresses.

 Does research data with no PII need to be stored securely?

  • Technically, that can be on a local hard drive. However, Information Resources would like to have a conversation about the safety of that data in terms of backups.  Even "rolledup" or "anonymized" data can be harmful to the reputation of the faculty member or institution if compromised?

Does research data with PII need to be stored securely?

  • PII can be different things. Some research with PII can be governed by law, if this is the case, that data absolutely needs to be stored on a Cortland server (U drive, shares drive or other Cortland server).  Information Resources will help anyone who deals with this type of research. Often the presence of PII is enough to put it at a level which needs to be stored on a Cortland server, however, when combined with other data elements it raises to a level where additional security may be required. Especially when dealing with children under 13 years old, health data, etc. Please contact Information Resources if working with PII data.

Do electronic files of graded papers need to be stored securely?

  • These should be stored on a U drive or Shares drive.

 Do electronic files of papers not graded (keep for assessment or records reasons) need to be stored securely?

  • This may fall under FERPA due to a student’s names or information being on it.

Department Assessment files – which may contain PII but do not contain “grades”

  • It is best practice to store department assessment files that may contain PII to a secure location such as the U drive or Shares drive.

Back-up hard drives not connected to your computer and kept in your locked office

  • Backup hard drives, even under lock and key, can have a tremendous amount of data on them.  That data would be better in a secure environment. Typical external drives are also very prone to physical failures, dropped or even bumped drives can result in loss of data. However, Information Resources would like to work with faculty and staff to make sure their data is safe. Some faculty and staff have more data than a U drive can allow, but it does not mean IR cannot work with them on a safe storage solution. Please contact Information Resources if you have questions about data security or storage solutions.


2019-07-11 11:16:36.084 - SAWS

The Help Center

Call 607-753-2500 for immediate assistance.

Submit an Online Support Request