

BSD Business Unit Type:Įach non-UCMIT supported BSD Department is categorized by Business Unit Type.

Hardware-Encrypted USB flash drives are critical to safeguarding not only patient health information but also other forms of confidential information including draft manuscripts with critical data, budgets for grant applications that contain confidential salary information, and student performance data.ĬBIS implemented the same safeguards through the UCM Data Guardian program on 10,000+ devices using similar technology in February 2017 on CBIS and BSD devices supported by CBIS.

Regulations and government contracts require encryption to safeguard research data and to protect the privacy of patients, employees, and students. These safeguards will restrict select desktops and laptops from saving data to USB flash drives unless the drive is secure. Phase II of this initiative requires the implementation of safeguards to protect the confidential information from being stored on insecure USB flash drives.

The audit resulted in notable findings that are being addressed systematically by BSD IT and the BSD Information Security Office ISO. In 2017, Internal Audit completed an assessment of encryption within the BSD. Once data is encrypted, it becomes undecipherable in the background, and a malicious user will not be able to access the data unless providing the private password.Īlternatively, BSD faculty and staff may use UChicago Box to store and access files remotely without the need for USB flash drives. Hardware-Encrypted USB flash drives provide the best protection in the event the drive is lost or stolen. The device’s portability can also lead to it being lost or stolen along with potential confidential data stored on the device. Portable storage solutions like USB thumb drives, data sticks, pen drives, memory units, key and chain drives (i.e., USB flash drive) provide BSD staff, student or faculty a convenient method of transporting and storing large amounts of data due to the device’s size, portability, and reliability.
