Office of Information Security Information & Technology Services Office of Information Security Srini Uppugonduri Associate Director of Information Security Third Party Data – Contractual Agreements and Data Restrictions

UNCC Office of Information Security Agenda Restricted Data Use on Campus Policy Available resources Q & A 11/27/2018 UNCC Office of Information Security

UNCC Office of Information Security Restricted Data Provided by “Third Party” Vendors, Contractors, Sponsors … Confidential, Protected, Restricted Protected by law / policy / agreement Higher level of Security Protections At rest, In transit 11/27/2018 UNCC Office of Information Security

UNCC Office of Information Security Examples Name, Social Security Numbers, Drivers License, State/Federal ID, Financial Account Numbers, Card Numbers, Security Codes Medical Information, Insurance Information, Health care records, Engineering data, designs, blue prints, intellectual property Third party defined Confidential, Protected or Restricted Data 11/27/2018 UNCC Office of Information Security

UNCC Office of Information Security Campus Use Primarily Research Electronic Physical Copies Equipment Personnel 11/27/2018 UNCC Office of Information Security

UNCC Office of Information Security UNCC Policy https://legal.uncc.edu/policies/up-311.9 11/27/2018 UNCC Office of Information Security

UNCC Office of Information Security Available Resources Data Security Officer Dr. Jack Stein Assistant Dean and Director of Engineering Computing ITS Information Security Policy Templates – Data Security Plan Third party agreements 11/27/2018 UNCC Office of Information Security

UNCC Office of Information Security Questions? Thank you! 11/27/2018 UNCC Office of Information Security