Contents
What are the exceptions to Level 1 encryption?
All Level 1 data encryption exceptions must be documented, reviewed and approved by the Information Security Officer (ISO). Encrypting data makes it unreadable, unless the software managing the encryption algorithm is presented the appropriate credentials and keys to unlock the encrypted data.
Are there any tools that can encrypt data?
This document identifies tools that can encrypt data using methods sufficient to meet the University’s Information Classification and Handling Standard, when used in conjunction with other requirements listed in IT Security Standard: Computing Devices.
Why are encryption keys used to protect Level 1 data?
Encryption keys used to protect Level 1 data shall also be considered Level 1 data. Key management processes shall be in place to prevent unauthorized disclosure of Level 1 data or irretrievable loss of important data. This includes:
Do you have to comply with Encryption laws?
Any travel abroad, sharing of encrypted data, export or import of encryption products (e.g., source code, software, or technology) must comply with the applicable laws and regulations of the countries involved. This includes those countries represented by foreign nationals affiliated with the University.
What does the US Department of Commerce say about encryption?
The United States Department of Commerce provides additional guidance specific to such encryption export controls explained in Controls That Use Encryptions. Data encryption involves key codes that must be protected.
How is information encrypted in an IT system?
Encryption Approaches Type Considerations and Trade-offs Full Disk All information is automatically encrypt Container or Volume Information is encrypted when placed on File or Folder Each designated data file must be manage Application Information used by the application is e