Storing Restricted and Sensitive Data in Box @ UNH

Box @ UNH provides enhanced security via SSL connection and encryption of data at rest; however, some data is inappropriate for storage in Box @ UNH as well as most university general use servers and fileshares.

  • UNH Data Classifications and Storage

    • Public Data (1 lock): No restrictions on storage in Box @ UNH.
    • Sensitive data (2 lock): No restrictions on storage in Box @ UNH
    • Restricted (legally protected) data (3 locks): Certain information should not be stored in Box @ UNH. Contact UNH ISS for appropriate solutions.
  • Don't store unnecessary data:

    • Scan existing files with Identity Finder before transfer to Box @ UNH to locate SSN's and credit card numbers.
    • Old and outdated files no longer useful (e.g., "just in case")
    • No business need for the data (or obsolete business need).
    • Legal exposure; data is discoverable in lawsuits.
    • Define and use a record retention policy (USNH Policy)
  • Box @ UNH not accepted nor recommended for:

    • Protected health information (PHI) subject to HIPAA/HITECH regulations
      • Understand "cover entity"
      • PHI not covered by HIPAA still must be protected
    • Credit Card information
      • Customer data; does not apply to P-Cards
      • Policy, not law
    • Export controlled research data
      • Sharing risk
  • Be wary of using Box Sync when storing restricted data.

    • Places inappropriate information on local devices
    • Use only with encrypted devices when storing restricted data
Custom Fields
  • Application: Box@UNH
  • Department: Enterprise Collaboration & Messaging
Attached Files
There are no attachments for this article.
Related Articles RSS Feed
File-Sharing Policy
Viewed 1250 times since Tue, Jun 2, 2015
Mobile Device Health and Security
Viewed 1651 times since Fri, Jul 10, 2015
Red Flag Rule - Identity Theft Prevention
Viewed 2695 times since Thu, May 7, 2015
Antivirus Software for Windows
Viewed 14107 times since Wed, Aug 12, 2015
UNH Information Security Services - Tax Season Resources
Viewed 668 times since Wed, Feb 21, 2018
Vendor Contracts: Information Security and Privacy Considerations and Security Assessment Review
Viewed 3093 times since Mon, May 4, 2015
Microsoft Security Essentials and Windows Defender Usage
Viewed 8231 times since Wed, Aug 12, 2015
Using ESET Mac Antivirus Software
Viewed 468 times since Thu, Mar 7, 2019
FAQs- System Center 2012 Endpoint Protection, Microsoft Security Essentials, and Windows Defender
Viewed 6525 times since Wed, Aug 12, 2015
Network Registration & Vulnerability Scans
Viewed 1841 times since Wed, Apr 29, 2015