Security Programs
- HIPAA Compliance Information
- GLB Information Security Program
- ResNet Policies
- Port Restriction Plan
- Recommendations for securing windows NT/2k/XP/2k3 servers from NetBIOS TCP (port 137/445) resource enumeration attacks
Data Restrictions
Public -- Information which may or must be open to the general public. It is defined as information with no existing local, national or international legal restrictions on access.
Example: Course Catalog
Sensitive -- Information whose access must be guarded due to proprietary, ethical, or privacy considerations. This classification applies even though there may not be a civil statute requiring this protection.
Example: Date of Birth, Ethnicity
Special Reminder Regarding PUID
Restricted -- Information protected because of protective statutes, policies or regulations. This level also represents information that isn't by default protected by legal statue, but for which the Information Owner has exercised their right to restrict access.
Example: Student Academic Record (FERPA)