Sponsor: Peter M. Siegel, Vice Provost for Information and Educational Technology

Status:

• The Whole Disk Encryption policy (PPM 310-75) was adopted on May 29, 2007.
• Pointsec for PC encryption software is available at no cost to those who qualify. 
• Pointsec Media Encryption (ME) and Pointsec for Linux encryption software are available for purchase.
• See http://security.ucdavis.edu/encryption.cfm additional information about obtaining free encryption software as well as the purchasing process.

Background

In recent years, UC Davis has taken several steps to clarify the laws and policies intended to prevent unauthorized access to certain types of information, and to help campus departments and community members protect restricted data. While campus units have been encouraged to eliminate unnecessary electronic storage of sensitive personal information, the need to protect sensitive data necessary to conduct university business remains.

Encryption is one option for enhancing data privacy. It makes it possible to convert readable data into a format that cannot be read by unauthorized parties. To encourage proper encryption of sensitive data, the campus adopted the Whole Disk Encryption policy and IET offers encryption software to campus departments at no cost.

Types of Restricted Information

Restricted data may include but is not limited to:

• Identity information (Social Security numbers, California driver’s license or identification card numbers)
• Financial account information (Checking, savings and credit card account numbers)
• Student record information (Grades, financial aid information)
• Medical record information (Diagnoses, treatment information, identity information included in medical records)
• If stolen, this information could be used to obtain credit in another person’s name, withdraw money from existing accounts, or commit identity theft or similar crimes. Victims can spend thousands of dollars—and hours—recovering from their losses.

Pointsec Encryption Software

• IET provides funding for Pointsec encryption software. Pointsec is available for personal computer licenses for individuals and departments that demonstrate the need for this service. 
• Whole disk encryption software programs like Pointsec scramble the entire content of computers or devices (e.g. flash drives) so that it cannot be understood if accessed by someone who has not entered the proper password (or key) for un-scrambling (or decrypting) the information. If you have encryption and your computer is lost or stolen, or if someone tries to access private files, information on the computer will not be readable.

See http://security.ucdavis.edu/encryption.cfm for more information.

Primary Feedback to Date: Pending