Security Overview

Whenever the college is preparing to use a technology or software, a security risk assessment should be performed. The purpose of the assessment is to identify and diminish any significant risks when we work with a service provider who may transmit and/or store Columbus State data. By identifying and documenting agreed upon risk mitigation actions, we are able to reduce the likelihood and impact of a security incident.

Data loss prevention is a type of service that protects sensitive data against unauthorized access, use, sharing, or other transfers of data. The campus uses a data loss prevention system to protect inbound and outbound electronic messages. To learn more about this service please contact the IT security office.

Encryption is a service that converts data into an unreadable format preventing unauthorized access. Data encryption should be used when sensitive data, such as Personally Identifiable Information (“PII”) is distributed or transferred electronically or when systems contain or store sensitive information.

The IT security office is available to investigate and respond to potential security incidents on campus. If you receive a notification of a breach or see other suspicious computer activity, report immediately to the IT Support Center.

Old media devices like USB drives, CDs, DVDs, tapes, or floppy drives may contain student data or other sensitive information. To prevent inadvertent disclosure of data, unused media devices need to be securely destroyed. To schedule a pickup or dropoff of unused media contact the IT Support Center.

Protecting college data is a shared responsibility. Paper records that contain student data or other sensitive information need to be securely destroyed. The college has strategically placed secure shredding bins across campus for your convenience. Additional bins or loaner bins can be made available upon request. Additionally, if you have boxes of paper that need to be destroyed, other accommodations can be made available.

On both a professional and personal level, the Internet and technology has become an essential part of how we work and communicate. From accessing student data to posting on personal social media, we have come to depend on the use of the Internet and technology. Unfortunately, with those conveniences come security risks. One of the best defenses is being educated. Security awareness training will provide information on how you can safeguard college assets and spot or avoid security threats: Malware and Ransonware Dangers, Password Best Practices, Email Encryption, Phishing and Social Media Safety.

Help identify information and technology risks that could potentially cause information loss or financial or reputational harm to the college. The goal is to identity, document and reduce the overall information security risk to the college.