Information and data are the currency of the 21st century. It's valuable — and IU retains a great deal of it. Many of us are responsible for the safety of other people's information. Every appropriate safeguard must be taken to secure this data.

Site Pages

  • Data Privacy Day — 2012

    • Last updated: February 1, 2012 at 6:01 PM
    Data Privacy Day at IU highlighted FERPA, the Family Educational Rights and Privacy Act — led by Dennis Hicks and Mary Beth Myers, Registrars for IU East and IUPUI, respectively.

  • Privacy Cartoons

    • Last updated: January 4, 2012 at 11:48 AM
    Various comics and political cartoons related to privacy.

  • Checklists & related documents

    • Last updated: March 16, 2012 at 11:39 AM
    Samples, checklists, and templates for documenting IT compliance, provided by UITS IT Professional Services & Support.

  • Disabling P2P File Sharing

    • Last updated: December 1, 2011 at 3:01 PM
    Here are some of the most common peer-to-peer clients and link to instructions on how to disable file sharing on each one. Use P2P sharing clients at your own risk; this does not exempt you from restrictions against illegally downloading or distributing copyrighted material.

  • Data Privacy Day

    • Last updated: January 30, 2012 at 6:43 PM
    Data Privacy Day is an annual international celebration of the dignity of the individual expressed through personal information. Data Privacy Day 2012 is Friday, January 27.

  • Laptop Inspections and Seizure

    • Last updated: October 11, 2011 at 4:09 PM
    The U.S. Customs and Border Protection (CBP)can inspect, and confiscate, electronic devices such as laptops, cell phones, PDAs, and storage devices.

  • Maintain Off Site Backups

    • Last updated: September 19, 2011 at 10:10 AM
    As part of a disaster recovery plan, off site backups are important to minimize the chance that a disaster (e.g., a tornado) destroys both the original computer system and its backup media.

  • Best Practices For Securing IT Resources

    • Last updated: January 25, 2012 at 12:06 PM
    This material is meant as a guide for department administrators and technicians working to minimize the chance of an IT security breach on Indiana University computer systems, telecommunications, or other information technology systems.

  • Secure File Transfer Alternatives

    • Last updated: April 12, 2011 at 7:56 PM
    It's important to know what options are available to get your file from point A to point B and to understand whether the method you choose provides adequate security given the sensitivity of the data being transferred.

  • Cloud Computing Resources

    • Last updated: October 27, 2011 at 11:35 AM
    Cloud computing is a style of computing in which dynamically scalable and often virtualized resources are provided as a service over the Internet

    Related Blog Posts

  • HIPAA Breaches on the rise: Are you prepared for an OCR visit?

    • April 30, 2012 at 4:40 PM
    With the upward trend of HIPAA breaches being reported to the OCR all across America, multiple HIPAA advisors have brainstormed to identify the key components in establishing an effective program that aims to reduce an organization’s risk for a breach.

  • Introducing Domain 3: Organization (with special appearances by two VPs!)

    • April 27, 2012 at 4:08 PM
    It's time to review Domain 3 of IU's Information Security and Privacy Program: Organization!

  • Information Security and Privacy Program Awareness Update

    • April 26, 2012 at 12:53 PM
    A memo has been sent to the President's Cabinet to help raise awareness of the Information Security and Privacy Program.

  • Microsoft says two basic security steps might have stopped infections

    • April 26, 2012 at 7:05 AM
    Microsoft says two basic security steps might have stopped infections

  • Weak passwords still subvert IT security

    • April 25, 2012 at 11:19 AM
    Despite years of warnings, analysts say enterprises continue to be plagued by 'the curse of the reusable password.'

  • How to download your data from Google and Facebook

    • April 25, 2012 at 10:56 AM
    Check out this guide to seeing what data Google and Facebook have about you.

  • Compliance is Everyone's Responsibility

    • April 20, 2012 at 1:45 PM
    Be aware -- Report concerns -- Be accountable!

  • Thousands affected in Texas A&M data breach; shows security is more than just firewalls

    • April 18, 2012 at 10:16 AM
    Texas A&M has notified thousands of alumni that their personal information, including Social Security numbers, was inadvertently made public. The mistake, a result of human error, demonstrates that people are just as important as technology when it comes to security.

  • Introducing Domain 2: Policy Administration

    • March 22, 2012 at 3:44 PM
    It's time to review Domain 2 of IU's Information Security and Privacy Program: Policy Administration!

  • FTC Commissioner to speak at IUB March 21

    • March 21, 2012 at 12:12 PM
    Commissioner Brill will address the mission of the FTC, her own experiences at the Commission and, previously, in state attorneys general offices, with special regard for the challenge of protecting privacy in the face of dramatic technological change.
    • Download a PDF of the

    Recent Security Bulletins

  • April 11, 2012 at 3:24 PM

    • Vulnerability in Windows Common Controls active exploit
    A remote code execution vulnerability exists such that an attacker who successfully exploited this vulnerability could run abitrary code on the target system, then install programs; view, change, or delete data; or create new accounts with full rights.
  • April 5, 2012 at 2:51 PM

    • Mac Malware Exploiting Java Vulnerability
    "Flashback" is Mac-specific malware that is currently spreading via a recently patched Java vulnerability
  • March 16, 2012 at 11:42 AM

    • Vulnerability in Microsoft Remote Desktop
    A remote code execution vulnerability exists such that an attacker who successfully exploited this vulnerability could run abitrary code on the target system, then install programs; view, change, or delete data; or create new accounts with full rights.
  • February 28, 2012 at 1:53 PM

    • Phone Phishing Observed at IU
    Warning about phone calls requesting information or requesting users to take action to compromise computers.
    • Read the PSIA Blog
    • IU Notify
    • Crime Prevention Tips from IUPD
    • Request Assistance from Environmental Health and Safety
    • Secure Your Computer