Site map

Enterprise Security Policy [3]
- 1. High Risk Confidential Information (HRCI) [4]
  - 1.1 Storing High-Risk Confidential Information [5]
  - 1.3 Personally Identifiable Medical Information [6]
- Compliance and Assessment [7]
- Risk Assessment [8]
- University Security Mandates [9]
- 2. Confidential Information [10]
- 3. Student Information [23]
  - 3.1 FERPA Directory Information [24]
  - 3.2 FERPA Blocks [25]
- 4. Credit Card Information [26]
  - 4.1 Accepting Payment Cards [27]
- 5. Physical Environment and Recording the Activities of Individuals [28]
  - 5.1 Physical Environment [29]
  - 5.2 Recording Information About the Activities of Others [30]
- 6. Working With Vendors [31]
  - 6.1 Contracts [32]
- 7. Computers and Servers [33]
  - 7.1 Computer Operation [34]
  - 7.2 Computer Setup [35]
  - 7.3 Target Systems and Controllers [36]
  - 7.4 Network Take-down and Vulnerability Scanning [37]
- 8. Other IT Policies [38]
  - 8.1 IT Service Resumption [39]
  - 8.2 Incident Response Process [40]
- 9. Federal & Regulatory [41]
  - 9.1 Disposition and Destruction of Records [42]
    - Records Management [43]
  - 9.2 Reporting Security Breaches [44]
  - 9.3 Interacting with Legal Authorities [45]
- 10. Web Based Surveys [46]
  - 10.1. Web Based Surveys [47]
Policies by Topic [48]
- Confidential Information [49]
- Contract Information [50]
- High-Risk Confidential Information (HRCI) [51]
- HUID Information [52]
- Passwords [53]
- Physical Access and Building Logs [54]
- Student Information [55]
- Vendors [56]
- Working With Credit Cards [57]
- Researchers [58]
  - 1.2 Human Subject Information [59]
Privacy Policy [60]
Reporting Security Compliance Issues [61]
Resources [62]
- Advisories and Advice [63]
- Best Practices [67]
- Forms [68]
- Presentations [69]
- Sample Statements [70]
  - Contract Riders [71]
  - Web Privacy Statements [72]
    - Web Privacy Statement Sample 1 [73]
    - Web Privacy Statement Sample 2 [74]
    - Web Privacy Statement Sample 3 [75]
- Training [76]
- University Security Mandates [77]
- Useful Links [78]
- References [79]
  - Access to Harvard Confidential Information [80]
  - Confidentiality Agreement [81]
  - FERPA Block Information [82]
  - FERPA Glossary of Terms [83]
  - FERPA Regulations [84]
  - Health Insurance Portability and Accountability Act (HIPAA) [85]
  - Protecting Harvard Confidential Information [86]
Full Policy [87]

Front page

Primary links