14. Any actual or suspected loss, theft, or improper use of or access to, Harvard confidential information or systems must be reported

Any actual or suspected loss, theft, or improper use of or access to, Harvard confidential information or Harvard systems must be reported as soon as possible to a local School Security Officer or a University Information Security Officer.

13. Harvard must conduct appropriate due diligence on third parties that will store or have access to Harvard confidential information or sensitive systems.

Third parties must be capable of protecting the information and systems to which they have access and must be required to protect the information and systems.

Information Security Policy

Harvard University

Policy

14. Any actual or suspected loss, theft, or improper use of or access to, Harvard confidential information or systems must be reported

13. Harvard must conduct appropriate due diligence on third parties that will store or have access to Harvard confidential information or sensitive systems.

12. Electronic and physical records containing Harvard confidential information must be properly disposed of so that the information cannot be retrieved or reassembled when no longer needed or required to be kept.

11. Software must be kept up to date on all Harvard systems and systems storing Harvard confidential information.

10. Electronic and physical records containing Harvard confidential information must be appropriately protected when transported or transmitted.

9. All critical systems, and systems and locations where Level 4 or 5 information is stored, must be accurately identified and physically secure.

8. All Harvard systems and systems storing Harvard confidential information must be protected against improper access.

7. Harvard confidential information must be protected on any computer or device.

6. All users of Harvard confidential information resources must be accurately and individually identified.

5. All persons accessing Harvard confidential information must be trained in protecting such information.

4. Harvard systems must not be used in a manner that violates University policies.

3. All access to and use of Harvard confidential information must be for authorized Harvard purposes.

2. All users are responsible for protecting their Harvard passwords and other access credentials from unauthorized use.

1. All users are responsible for protecting Harvard confidential information that they use in any form from unauthorized access and use.

Filter By

a5521c6de467d1f1f57b952884f5e43e