Printed on: 05/20/2018. Please go to http://policy.umn.edu for the most current version of the Policy or related document.

APPENDIX TO POLICY

Data Storage Standard

Objective

Identify appropriate storage locations or media to comply with regulations or contractual agreements and to maintain the confidentiality, integrity and availability relevant to the University owned/generated data and the data for which the University has contracted.

Security Controls

Data stored on Multi-user systems (e.g., server, print server)

The following table defines the baseline security controls for data stored on multi-user systems.

Control Security Level
ID Description High Medium Low
DS.A.01 Store data on University owned or University approved location for this type of data Required Required Recommended
DS.A.02 Establish procedures for storing and handling information to protect its confidentiality, integrity and availability Required Required Recommended
Data stored on Single-user systems (e.g., desktop, laptop)

The following table defines the baseline security controls for data stored on single-user systems.

Control Security Level
ID Description High Medium Low
DS.B.01 Store data on University owned or University approved location for this type of data Required Required Recommended
DS.B.02 Establish procedures for storing and handling information to protect its confidentiality, integrity and availability Required Recommended Optional
Data Exchange or Transfer

The following table defines the baseline security controls for data exchange or transfer.

Control Security Level
ID Description High Medium Low
DS.C.01 Establish agreements for the exchange of information between the University and external entities Required Required Recommended

Resources Covered

This applies to IT resources owned or contracted by the University. This also applies to personally owned devices authorized to store University data.

Individuals Covered

This applies to University community members who store or manage University data.

Related Information

More information on Data Storage

Published Date

  • November 2014

Document Feedback