Data Management & Storage @USU
When sensitive data is stored or transmitted as part of the business needs of USU, employees are responsible for maintaining integrity, confidentiality, and availability of the data. This article will outline the data classifications, the various management roles, and the storage requirements for interacting with sensitive data at Utah State University.
Security Policies & Data Classification
Proper security, management, storage, and access controls of data are determined by various policies and compliance regulations. In order to ensure these measures are taken, USU classifies each piece of data by its content. The respective policies and information about data classifications are listed below.
Data Management Roles
Everyone at USU is responsible for maintaining integrity, confidentiality, and availability of sensitive data. Therefore it is important to understand all management roles, not just your own. Understanding how the roles are connected helps ensure proper data management and provides a governing structure in interacting with sensitive data.
-
-
- Data Trustees: University Administrative Officers (President, Provost, Vice Presidents, etc) who have top-level responsibilities for data and how it is managed within their divisions.
- Data Stewards & Custodians: Management level officials (Controller, Registrar, Directors, Managers, etc) who have direct operational level responsibility for specific databases and systems that may contain sensitive data. Custodians are individuals that have been appointed by Data Stewards to carry out some of their duties in managing and safekeeping sensitive data.
- Data Users: Faculty, advisors, and staff members who use and record data as part of their job duties.
- IT Support Technicians: IT professionals with HR job responsibility to support computers and other IT Resources that are used to display, process, store, or transmit sensitive data in compliance with Policy 5200: Information Security and Appropriate Use
- Data Owners: Individuals whose personally identifiable information is contained within the specified data. In all other instances, the Data Owner is Utah State University.
-
Data Storage
USU has many different internal and external data storage options such as Box, One Drive, Aggie Shares and Google Drive, but the classification of data determines where it can be stored. Review the information below to learn where you can store USU data and how storage impacts safety.
Icons provided by FreePik under CC Attribution 3.0.