WMU Sensitive Data Guide

The WMU Sensitive Data Guide shows the various WMU supported data storage or application solutions that could be used to store data elements as outlined in the University's Data Classification Policy. These tables shall be used to determine the best possible and most secure solution when storing classified university data. Note that "Permitted with Consultation" indicates that the solution requires that the IT Security and Privacy Officer should be consulted in order that the appropriate security measures and procedures are used when considering that storage solution. 

Legend

CodePermissionInstructions

P

Permitted

 Review the University Data Classification Policy.

C

Permission contingent upon consultation with IT Security and Privacy Officer. 

Submit an Information and Data Security Inquiry.

Review the University Data Classification Policy.

H 

Permission contingent upon consultation with University HIPPA Compliance Officer and IT HIPAA Security Officer.

Consult with the University HIPPA Compliance Officer.

Submit a HIPAA and Electronic PHI Security Inquiry.

Review the University Data Classification Policy.

Review University HIPAA policy.

N

Not Permitted

  Take no action.

Google G-Suite for Education (WMU)

WMU Supported Data Storage or ApplicationHIPAA/PHIRestrictedConfidentialInternal Public
WMU Google Core Apps
Drive, Photos, Hangouts, Sites		 N N C P P

WMU Google Non-Core Apps
Google+, Groups, Keep, YouTube, Blogger

 N N N P P

W-Exchange/Microsoft 365

WMU Supported Data Storage or ApplicationHIPAA/PHIRestrictedConfidentialInternal Public
OneDrive for Business H C P P P
Outlook Web Client (email, calendar, contacts)
*Email with point-to-point encryption for email messages		 H C P P P
Outlook Desktop Client*
(email, calendar, contacts)
*with full disk encryption
*Email with point-to-point encryption for email messages		 H C P P P
Sites (SharePoint) N N P P P
Groups, Teams & Planner N N P P P

Other WMU Supported Data Storage and Applications

WMU Supported Data Storage or ApplicationHIPAA/PHIRestrictedConfidentialInternal Public
Apple Cloud Storage N N N P P
Banner N P P P P
Cognos N P P P P
Departmental file server
*Approval by Dept IT Director		 N C P P P
Adobe Creative Cloud storage N C C P P
Elearning N C P P P
Homepages N N N P P
ImageNow N P P P P
Qualtrics (WMU) H N C P P
University Web Sites (CMS) N N N P P
Externally hosted web sites N N N P P
University Owned Devices (I.e. Phone, laptop, flash drive, hard drive)
*with permission & full disk encryption		 H C C P P
PeopleSoft N P P P P
Personally Owned Devices (i.e. phone, laptop, flash drive, hard drive) N N N P P
Cloud Storage Included with Software
*Permitted with Technology Compliance Review consultation & approval		 H C C P P