electronic mail systems, the Internet, etc. All such transmissions must use a virtual private network, encryption, or similar software as approved by Information Technology. Transmission over personal, or any non-KSU, network is prohibited. When transmitting restricted data over external communication networks, wireless or between computers, encryption is strongly recommended. While data that is classified as public has no transmission restrictions, caution should always be exercised when using or transmitting KSU information.
All KSU employees are responsible for the security and integrity of University information. All such information should be stored on University servers, network storage devices, or University approved Cloud Storage. Data stored on local PC drives is not recommended because such data is not backed up and a failure of a local drive can result in a complete loss of that data. Caution should always be exercised when storing KSU information.
Storage of confidential data on personal or unauthorized computing equipment is prohibited unless approval is received by Information Technology. If approved, then encryption will be required. Storage of credit card information is prohibited on computing equipment.
Storage media containing sensitive (i.e. restricted or confidential) information shall be sanitized completely before reassigning that medium to a different user or disposing of it when no longer used. Simply deleting the data from the media is not sufficient. A method must be used that completely erases all data. When disposing of media containing data that cannot be completely erased, it must be destroyed in a manner approved by Information Technology. Please contact Information Technology when needing to dispose or reuse media that contains sensitive data.
All confidential data must have a documented backup and recovery procedure.
Data retention will adhere to KSU's data retention policy. (Will be a link)