Security Classification Storage Options

Overview

Bryant University staff, faculty, and students working with University data must comply with University data protection policies and guidelines when using storage and collaboration services, both commercial cloud storage services, and services provided in-house by the Information Services division. The following storage requirements have been established to protect University data.

Storage Options

Description: Data Storage Options

  • Home Directory is the University’s network based file storage and sharing system.
  • Department File Shares is the University’s network based file storage and sharing system.
  • Local C: Drive is a University owned computer (desktop, laptop).
  • Google Drive is the service the University has entered into agreement with to provide university-wide storage. Check with Information Services to find out more about the service provider agreement.
  • Office 365 OneDrive is the service the University has entered into agreement with to provide university-wide storage. Check with Information Services to find out more about the service provider agreement.
  • Commercial Cloud Storage Services without an agreement with the University, including Dropbox, Box, Amazon Cloud, or other commercial data services, are not appropriate for storing most University data. 
  • Secure Storage Options: Your department may have chosen a secure storage solution for the sharing of sensitive data. Check with your supervisor or department head for more information. For additional technical instructions on how to securely share data with internal or external resources, please contact the Helpdesk.

About Data Classifications

University data classifications are outlined in Data Classification Guidelines. If you are not sure how to classify a piece of data, check with your supervisor or department head. As a rule, err on the side of caution and assume University data is confidential. This means choosing a secure storage option and declining to share it with others.

  • Data with multiple classifications must be treated according to the highest level of restriction.
  • The following requirements only apply to the storage of University data. If a storage option is approved for a certain type of data, it does not imply that data may be shared, distributed, or disclosed using that service.
  • To protect University data, be sure to change your account password regularly and follow all University policies and guidelines applicable to the appropriate use of University resources.

Cloud Storage: Understand the Risk

Although the University has agreements with several commercial storage providers, the use of cloud storage solutions presents risks to the University. The University does not own or operate the systems supporting these services. Key factors to consider when using cloud services:

  • Bryant University does not own these vendor services and has limited oversight of University data and cannot apply security controls once it has been uploaded to a cloud service. University staff may not be able to assist users in the event of data loss or security breach. 
  • Data stored on vendor services may be available to employees of these companies and could be illegitimately accessed without prior consent.
  • Vendor services may store data outside of the United States, which could violate regulatory control restrictions.