Work with User Devices

Level 3 on encrypted devices only

Do not store Level 3 information on unencrypted devices. For more information on how to ensure that your devices are encrypted, see the checklist for encrypting your device type.

No Level 4 On Devices

Work from materials stored on approved servers or services and do not copy them to your local system. If you are conducting field research to collect Level 4 data and cannot meet this requirement send an email to to request an information security consultation for Harvard-approved external encrypted portable storage media and process.