Outlook: Ohio University News & Information


Tuesday, December 11, 2012
Sensitive data: handle with care
Tip of the month from Internal Audit  

Jul 30, 2008  
  

This is part of a continuing series of monthly tips from Ohio University's Office of Internal Audit that address common errors, misunderstandings and control failures often found during audits. Internal Audit performs departmental and process reviews, working collaboratively with units to assess and improve controls across the university.


Our last article discussed the importance of encrypting e-mails that contain sensitive or protected information. A more basic question is: Do you really need to collect and send the information?

There are times when Social Security numbers, tax ID numbers, credit card numbers and student information must be communicated across the campus, but often this information can be obtained through more secure systems.

Ask yourself these questions before you collect, store or send sensitive data:

  1. What is the business need? Is the sensitive data really necessary?


  2. If you need a unique identifier, is there a more secure alternative such as employee or PID number? In some cases, first name, last name and some other nonsensitive information, such as phone number, is sufficient to identify an individual.


  3. Are you using the information as originally intended? For example, if you collected a credit card number for a purchase or registration, are you sending the number to someone to use for a different purpose? This is not permissible; the card holder must authorize the additional use.


Information is one of Ohio University's most precious resources. Make sure you use and protect information appropriately. If you are unsure of the alternatives available or would like further information, please contact the university's Information Security Office by e-mail at security@ohio.edu.

 


 


Related Links
Ohio University Internal Audit: http://www.ohio.edu/audit/internal.cfm 
Office of Information Technology: http://www.ohio.edu/technology/  
  

Published: Jul 30, 2008 8:58 AM  



Share this story

Bookmark and Share

Email To:

A valid EMAIL TO address is required. You have entered an invalid email format.
Email From:

A valid EMAIL FROM address is required. You have entered an invalid email format.

 

 Top stories

Feb 4, 2003
Residence halls conserve and recycle
 
Feb 5, 2003
E Street to Late Night: An evening with Max Weinberg
 
Feb 17, 2003
Kenner Bush receives prestigious Founders Citation
 
Wilfred Konneker receives prestigious Founders Citation
 
Mar 5, 2003
The Local Girls to perform at Ohio University Lancaster Campus
 
Sep 2, 2003
Local artist Ora Anderson featured on WOUB's 'Afternoon Edition'
 


Sign up for emergency text messages.
Outlook welcomes your feedback, news items and story ideas
Share comments about the site
Submit an announcement
Share a faculty, staff or departmental achievement

Subscribe to the Outlook listserv


Tel: 740-593-1890    Fax: 740-593-1887   E-mail:
news@ohio.edu
All Rights Reserved