All About Encryption

The following section is all about encryption and how it affects you if you are storing University non-public data on your local PC or removable devices

Protecting Non-Public University Data while working remotely

Things to be aware of while working from home

Data from any University hosted systems should not reside on your home local machine at anytime
Non-public university data in any format should not reside on your home local machine at anytime
Avoid downloading or transferring non-public university data form York campus share drives to your home local machine
Never save email attachments which are non-public university data related onto your home local machine, if you do while working, remove it when done

You can avoid having any kind of non-public university data on your home local machine by practicing the following:

1. Remote desktop into your office computer and do any kind of work that requires you to handle non-public university data on the York campus computer

2. If you happen to modify data while working from home that is non-public university data, move the file when done to your remote desktop on the York campus

3. If you find that your work will always include non-public university data but are not able to perform the above recommendations due to the nature of your work, request an encrypted system to work with at home. Do not use a person home system to do York College related work which deals with non-public university data

If you have been working on a machine at home which is compromised in some way and the machine has non-public university data on it you must report this immediately to the York College CIO

Please review information on this website about encryption and other security measures designed to keep non-public university data safe on campus and off

Visit: https://www.york.cuny.edu/it/service-delivery-unit/service-desk/security-awarenes

Breach Reporting Procedure
This PDF from the CUNY Central site discusses the steps necessary when a breach in information security has occurred.

Encryption
Any computer on campus that houses sensitive or non-public University data is subject to encryption. Encryption ensures that this data is transformed using an algorithm to make it unreadable to anyone except those authorized to manage the information. Encryption provides a high level of protection on your computer or removable devices. Here is some information you should know about Encryption.

Private Information Advisory
This PDF explains what is private information and what security measures should be exercised in order to protect the private information of others as if it were your own.

Breach Reporting Procedure
This PDF from the CUNY Central site discusses the steps necessary when a breach in information security has occurred.

Non-Public Data Disclosure Form
This PDF explains what is non-public university information. The form must be filled out if you are indicating you work with this type of data or if you are indicating you no longer work with this type of data and would like to be removed from an encrypted system.