In addition to the requirements above, install and run Crowdstrike endpoint detection and response client on operational technology devices where technically feasible.
Harvard-managed or Harvard-purchased laptops and desktops must run Crowdstrike endpoint detection and response client. For other configuration detail, check with your...
Work from materials stored on approved servers or services and do not copy them to your local system. If you are conducting field research to collect Level 4 data and cannot meet this requirement send an email to ithelp@harvard.edu to request an information security consultation for Harvard-approved external encrypted portable storage media and process.
Do not store Level 3 information on unencrypted devices. For more information on how to ensure that your personal devices are encrypted, see Personal Device Security Guides.