Campus Information Security Policy and Procedures

 

Feb. 25, 2011

Dear HVCC Community:

Not only is it important for us to remain compliant with FERPA and HIPAA, but it is also imperative that we all take information security seriously in what we do as a community college. We are here not only providing services, but making sure all sensitive and confidential information is protected and secured. For those who have access to sensitive and confidential student and faculty/staff information, please take extra precaution when you send a working file across the campus network (today many offices exchange data and information via the college’s email system).

– Verify you are sending the email to only your intended recipient (quite often, we don’t know who might be included when we send an email to a group, such as a listserv).

– Verify any attachment you are sending is the file you wish to include.

– Do not send an email or an attachment that contains sensitive information (such as student/staff identification data) to an outside email address (unless it is a required and authorized agency, such as a SUNY affiliated organization, such as ITEC and it is work-related).

Please make sure that any student’s ID or sensitive information would not be transferred to other places, especially if you have set up an automatic forwarding of your hvcc.edu email to gmail or yahoo, or any outside email address. If you accidently do so, please report it immediately to the Registrar, Kathy Petley (ext. 4555).

Over the years, the Department of Computer Services has developed and updated an Information Security Policy and related procedures. Please review them periodically. If you have any suggestions/comments related to the current policy and procedure, please send an email to the CIO, Dr. Steve Chen at s.chen@hvcc.edu

The following is the URL (the hyperlink) to our policies: https://www.hvcc.edu/compserv/infosecurity-articles.html

 

Published: Fri, 25 Feb 2011 00:00:00 +0000 by d.gardner