Where should I store my Files

file-storage.png

Where you store your files is determined by the type of information that your documents hold. Please review data classifications below to determine which storage would be most beneficial to you.

Restricted data is the most important or sensitive type of information. This information is regulated by law, such as HIPAA, and/or governed by other federal, state or local law, or University policy.

Examples: Social security numbers, driver license numbers, passwords, bank account numbers and credit card information.

Storage: Restricted information in electronic records should be secured with strong encryption when stored outside the central University administrative database. Restricted information in all forms of physical records must either be security locked or actively supervised in a private environment at all times.

Storage Option: RoyalDrive

Transmission: If you need to send restricted information through an email, please follow the following steps:
1. Save the information in RoyalDrive and set a password for it
2. Send the intended recipient an email containing the RoyalDrive ticket
4. Call the recipient and relay the password information to them

Confidential information, while not being overtly damaging to the user, can be potentially embarrassing to the University. It may contain records or information on events or activities that can be misinterpreted by people unfamiliar with those activities.

Examples: Grades, class lists, financial aid information, donor records, tuition bills, employee performance reviews, disability claims and department budget information.

Storage: Confidential information shall be stored in physical or electronic environments where access is limited to only those who need to conduct University business.

Storage Options: RoyalDrive, OneDrive for Business

Transmission: Confidential information may be transmitted over the University or external networks as required, but only with those who need to use the information.

Public use information can be released without much concern for security.

Examples: Campus maps, event and class schedules, press releases and athletic scores and schedules.

If you have any questions regarding data classification, handling and storage, contact the Information Security Office at 570-941-4226 or email infosec@scranton.edu.

Related documents:

Information Classification– Quick Review

Related Policies: