When you request technical support Please remember

Transcript:When you request technical support Please remember:
When you request technical support Please remember to request it by e-mailing or calling 5-9000, ithelp@harvard.edu Even if you e-mail or speak directly to Paul Millet (Econ-embedded tech), please send an e-mail to ithelp as a way of assuring that a “ticket” gets created. Data Security Harvard Economics Department Undergrad Program, 8.14.2104 Who am I? Peter Brown pbrown@harvard.edu 617 496-4108 Economics Department IT Manager & IT Security Officer What does Economics IT Security Officer Do? Work to maintain departmental compliance with Harvard requirements Inform department users of security rules and best practices Liaison to HUIT Security Group Assist researchers in obtaining IRB approvals Provide or help to specify secure computing resources for researchers Liaison to HUIT, OGC, AD in the case of a suspected data breach We all have to think about data security… Staff & Faculty & Students … but data-security questions for staff might not be the same as those for faculty or grad students. We are concerned about two basic types of data: Administrative Research First, to understand Harvard’s rules, what is the IRB? The Institutional Review Board is an internal HU group responsible for designating whether data for a research project should be considered human-subjects data and, if so, assigns a security level to any given research dataset stored at Harvard Usually before attaining the data, researchers apply for a IRB designation (of security level 1-5 ) Who cares about Levels 1 and 5? HU recognizes 5 levels of data sensitivity. Levels 1 and 5 do not commonly concern Econ staff: Level 1: public information (lowest level) Level 5: extremely sensitive research or medical data (highest level) What is Level 2? Disclosure of L2 info would not cause material harm, but HU has for some reason decided to keep it confidential. It might be: Unpublished research and intellectual property not in Level 3 or 4 Research data classified as Level 2 by the IRB Patent applications and materials Drafts of research papers Building plans and information about the physical plant Some examples of L3? Harvard personnel records Research data classified as Level 3 by the IRB HUIDs associated with names or with any other information that could identify individuals Institutional financial records (e.g., 33-digit billing codes), as opposed to individual financial records More examples of Level 3? Student data not covered under Level 4, including non-directory student information and directory information about students who have requested