A Blueprint for Handling Sensitive Data: Security, Privacy, and Other Considerations

Information security risks at colleges and universities present challenging legal, policy, technical, and operational issues. According to a recent study by the EDUCAUSE Center for Applied Research (ECAR), security incidents have resulted in compromises of personal information which have led to bad publicity and the potential for identity theft. Among the steps to protect sensitive data include an information security risk management program, data classification policies, clearly defined roles and responsibilities, awareness programs, and technology solutions among other interventions. This seminar presentation outlines a blueprint for protecting sensitive data according to the EDUCAUSE/Internet2 Security Task Force.