Encrypt confidential, sensitive, or high-risk information

To better protect the sensitive data that the University of Delaware collects, all computer files that contain confidential, sensitive, or high-risk information must be encrypted.

Encryption is the process of securing data so that it can only be used by those who should have access to it. If a computer is stolen or used by someone without permission, encrypted files and folders will be inaccessible.

Guidelines

• Do not store confidential information or PII on your computer or electronic devices if possible.
• Encrypt any confidential information that you must store.
• Use a strong password that is difficult or impossible to guess. Encryption only works if the password is kept secure.

Data encrypted using TrueCrypt or AxCrypt can be emailed and decrypted with a password. If encrypted confidential PII is emailed, the password should be sent separately so that if one email goes to the wrong address, no information will be compromised.

Encryption is natively supported on Windows Vista, Windows 7, Windows 8, and Mac OS X operating systems. After enabling native encryption, you should notice no change in your workflow. Information Technologies recommends that if you have sensitive data, store it in a single folder (Windows) or a single disk image (Macintosh) and encrypt the folder or disk image. This will help ensure that all confidential information is encrypted when not in use.