WMU Sensitive Data Guide

The WMU Sensitive Data Guide shows the various WMU supported data storage or application solutions that could be used to store data elements as outlined in the University's Data Classification Policy. This table is to be used to determine the best possible and most secure solution when storing classified university data. Note that "Permitted with Consultation" indicates that the solution requires that the IT support professional for a given department should be consulted in order that the appropriate security measures and procedures are used when considering that storage solution. Also note that the Banner, PeopleSoft, Cognos, and ImageNow applications are approved for the storage of restricted and confidential data.

P - Permitted
C - Permission contingent upon consultation with IT Security Officer
H - Permission contingent upon consultation with University HIPPA Compliance Officer and IT Security Officer
N - Not Permitted

Google G-Suite for Education (WMU)

WMU Supported Data Storage or ApplicationHIPAA/PHIRestrictedConfidentialInternal Public
WMU Google Core Apps
Drive, Photos, Hangouts, Sites		 N N C P P

WMU Google Non-Core Apps
Google+, Groups, Keep, YouTube, Blogger

 N N N P P

W-Exchange/Microsoft 365

WMU Supported Data Storage or ApplicationHIPAA/PHIRestrictedConfidentialInternal Public
OneDrive for Business H C P P P
Outlook Web Client (email, calendar, contacts)
*Email with point-to-point encryption for email messages		 H C P P P
Outlook Desktop Client*
(email, calendar, contacts)
*with full disk encryption
*Email with point-to-point encryption for email messages		 H C P P P
Sites (SharePoint) N N P P P
Groups, Teams & Planner N N P P P

Other WMU Support Data Storage and Applications

WMU Supported Data Storage or ApplicationHIPAA/PHIRestrictedConfidentialInternal Public
Apple Cloud Storage N N N P P
Departmental file server
*Approval by Dept IT Director		 N C P P P
Adobe Creative Cloud storage N C C P P
Elearning N C P P P
Homepages N N N P P
Qualtrics (WMU) H N C P P
University Web Sites (CMS) N N N P P
Externally hosted web sites N N N P P
University Owned Devices (I.e. Phone, laptop, flash drive, hard drive)
*with permission & full disk encryption		 H C C P P
Personally Owned Devices (i.e. phone, laptop, flash drive, hard drive) N N N P P
Cloud Storage Included with Software
*Permitted with Technology Compliance Review consultation & approval		 H C C P P