Security Overview

Whenever the college is preparing to use a technology or software, a security risk assessment should be performed. The purpose of the assessment is to identify and diminish any significant risks when we work with a service provider who may transmit and/or store Columbus State data. By identifying and documenting agreed upon risk mitigation actions, we are able to reduce the likelihood and impact of a security incident.

All Software as a Service (SaaS), otherwise referred to as “Cloud”, solutions used for Columbus State related business must have their cybersecurity practices reviewed and approved by Information Technology.

The IT Information Security team is responsible for performing the reviews and has adopted the EDUCAUSE Higher Education Community Vendor Assessment Toolkit (HECVAT).

One advantage of the HECVAT is that many popular higher education service providers/vendors may have already completed the form. To see if a provider/vendor you are interested in has completed a HECVAT, check the REN-ISAC HECVAT Community Broker Index.

To start your request, refer to Equipment and Software Request knowledge base.

Data loss prevention is a type of service that protects sensitive data against unauthorized access, use, sharing, or other transfers of data. The campus uses a data loss prevention system to protect inbound and outbound electronic messages. To learn more about this service please contact the IT Security Office.

Encryption is a service that converts data into an unreadable format preventing unauthorized access. Data encryption should be used when confidential/sensitive data, such as Personally Identifiable Information (“PII”) is distributed or transferred electronically or when systems contain or store sensitive information.

Confidential and sensitive data must not be stored on a portable drive without the use of encryption.

Visit our website to learn how to encrypt a portable drive.

The IT Security Office is available to investigate and respond to potential security incidents on campus. If you receive a notification of a breach or see other suspicious computer activity, report immediately to the IT Support Center.

Old media devices like USB drives, CDs, DVDs, tapes, or floppy drives may contain student data or other sensitive information. To prevent inadvertent disclosure of data, unused media devices need to be securely destroyed. To schedule a pickup or dropoff of unused media contact the IT Support Center.

Protecting college data is a shared responsibility. Paper records that contain student data or other sensitive information need to be securely destroyed. The college has strategically placed secure shredding bins across campus for your convenience. Additional bins or loaner bins can be made available upon request. Additionally, if you have boxes of paper that need to be destroyed, other accommodations can be made available.

Learn more about the secure shredding program.

Request additional bins

On both a professional and personal level, the Internet and technology has become an essential part of how we work and communicate. From accessing student data to posting on personal social media, we have come to depend on the use of the Internet and technology. Unfortunately, with those conveniences come security risks. One of the best defenses is being educated. Security awareness training will provide information on how you can safeguard college assets and spot or avoid security threats: Malware and Ransonware Dangers, Password Best Practices, Email Encryption, Phishing and Social Media Safety.

For more information about information security awareness, contact the IT Security team by emailing: helpdesk@cscc.edu.

Help identify information and technology risks that could potentially cause information loss or financial or reputational harm to the college. The goal is to identity, document and reduce the overall information security risk to the college.