Why all the talk about ENCRYPTION? Due to recent security breaches both local and on the national level. Texas A&M University has enacted STANDARD ADMINISTRATIVE PROCEDURE 24.99.99.M1.16 Information Resources – Portable Devices: Information Security (PDF). This applies to all portable computing devices, whether they are primaraly used for storage, like USB memory sticks, or computing, as in a laptop, smartphone or PDA.
What is Encryption? Encryption is not a new thing. Encryption is the process of transforming information (referred to as plaintext) to make it unreadable to anyone except those possessing special knowledge, usually referred to as a key. All traffic on the TAMULINK wireless network is encrypted; most home wireless networks are encrypted; your biology email account is encrypted; and your bank website and online shopping websites all use encryption to make sure your information is not "out in the open". Encrypting important data will ensure that it does not fall prey to unauthorized persons.
Should I encrypt EVERYTHING?!?! Definitely not. The above policy mandates that "Confidential Information" or "Information that is excepted from disclosure requirements under the provisions of applicable state or federal law, e.g., the Texas Public Information Act" be encrypted. This does not include your shopping lists or class notes. It does include: all student records, including gradebooks, addresses, etc; any financial information, University or Departmental financial information, including Procurement Card numbers and information; personal or employee information, such as home addresses, SSNs, and family member information; and health records of employees or students. In all instances, the first question you ask is, "do I really need this data with me?" In most cases, the answer is probably NO.
How should I secure this data? Security is two-fold. The first step to securing confidential information is to use encryption. Both free (Zero Footprint Crypt or TrueCrypt, both for Windows, or the built in OS X FileVault or Cypher for Mac) and pay programs are available to do this. Physical security is just has important has data security. Do not leave items that contain confidential information in the open. If you travel with a device that contains confidential information keep it with you at all times or secure it in a locked area.
Where can I go for more information? The Texas A&M Computing & Information Services - Information Technologies Issues Management office has an Encryption webpage with more information on the policy, links to software and tutorials to show you the steps to encrypt your devices and/or data.
As always, feel free to ask David or J at 845-7751, or email if you have any questions.