Information ServicesCyber Guidance

Data handling

Protect your data:

  • make back-ups
  • use secure Wi-Fi
  • use encryption

Lock before you walk:

  • lock it up or lock it down before you leave it

Protect your data with strong passwords:

  • use strong passwords
  • use a password manager
  • use 2 Factor Authentication on critical accounts

Data must be categorised, processed, and stored according to the following registers:

Category Data Examples
High Any data that is high confidential. This could be time sensitive data that will later become public (such as research of financial plans). This category includes special categories of personal data, as described by GDPR.
  • Passport and visa information
  • Health records
  • Grievance data
  • Biometrics
  • DNA
Medium Any data for the internal running of the University, which is not classed as high. This category includes personal data as described by GDPR.
  • Unpublished research data (at owner's discretion
  • Student records and admission
  • Staff employment applications
  • Personnel files
  • Benefits
  • Salary
  • Birthdate
  • Personal contact information
Low

Any data publicly available.

Any data not classified as high or medium.

  • Unpublished research data (at owner's discretion)
  • Public policies and procedures
  • Job postings

 

Monitoring

The University will monitor the use of University devices and services to comply with legal, regulatory and operational requirements.

The University will ensure the integrity and confidentiality of this information.

All monitoring activities will be appropriately authorised and documented.

User policies

All students, staff, and third parties must comply with guidelines on:

  • acceptable use in accessing University devices and services
  • acceptable personal use of University devices
  • physical security of IT equipment
  • personal device use for University purposes

Find out more about University Cyber Security standards.

Training

All staff and students should complete cyber security awareness training available.