Harvard University is committed to protecting information resources that are critical to its academic and research mission. Protection may be governed by legal, contractual, financial, or University considerations. Harvard is equally committed to preserving an environment that encourages academic and research collaboration through the responsible use of information technology resources.

The University Technology Security Officer facilitates the development of security and privacy requirements and policies that support these commitments and works to communicate the policies to the University community. Each Harvard School is responsible for implementing these University guidelines and for developing local policies, where needed, to facilitate a secure environment that is consistent with University requirements.

Harvard community members-- student, staff, and faculty-- encounter sensitive information every day, information such as student grades and evaluations, staff evaluations, credit card numbers, bank accounts, salaries, and personal information including home addresses for example. This information is considered confidential by the University and by the person the information is about.

Everyone at Harvard has a responsibility for proper handling and protection of confidential information. The University has developed a general Enterprise Security Policy http://www.security.harvard.edu/tech_security/enterprise.php to provide direction on the protections that must be employed.

It is up to all members of the Harvard community to be aware of the confidential information they have and threats to its security. These threats include for example, receiving confidential data on an open fax machine, storing confidential information on a laptop, or leaving paper files on a desk over night.

Harvard community member must protect confidential information, understand who has access to it, and must pass on these requirements if they pass on the confidential information. Policy questions may be directed to the University Technology Security Officer (scott_bradner@harvard.edu).