Changes to Policy 5.10 Information Security

<!DOCTYPE html> <html lang="en" dir="ltr"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta charset="utf-8" /> <script async src="https://www.googletagmanager.com/gtag/js?id=G-QD92JX5J14"></script> <script>window.dataLayer = window.dataLayer || [];function gtag(){dataLayer.push(arguments)};gtag("js", new Date());gtag("set", "developer_id.dMDhkMT", true);gtag("config", "G-QD92JX5J14", {"groups":"default","cookie_domain":"it.cornell.edu","page_placeholder":"PLACEHOLDER_page_location"});</script> <meta name="description" content="There are important updates to Policy 5.10 Information Security, that better align with our current technology and security environment. For more information, please read the revised policy. Data Classification Changes Data classifications names have changed from: Confidential changed to High-Risk Restricted changed to Moderate-Risk" /> <link rel="canonical" href="https://it.cornell.edu/security-and-policy/changes-policy-510-information-security" /> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="/themes/custom/cwd_itc/favicon.ico" type="image/vnd.microsoft.icon" /> <title>Changes to Policy 5.10 Information Security | IT@Cornell</title>  <meta name="title" data-type="string" content="Changes to Policy 5.10 Information Security | IT@Cornell"> <meta name="content_type" data-type="string" content="KB Article"> <meta name="access" data-type="string" content="public"> <meta name="audience" data-type="string" content="Faculty"> <meta name="audience" data-type="string" content="IT Professionals"> <meta name="audience" data-type="string" content="Staff"> <meta name="audience" data-type="string" content="Students"> <meta name="topic" data-type="string" content=" Working with High Risk Data"> <meta name="topic" data-type="string" content="Protect University Data"> <meta name="service_offering" data-type="string" content="Security & Policy"> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/align.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/fieldgroup.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/container-inline.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/clearfix.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/details.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/hidden.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/item-list.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/js.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/nowrap.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/position-container.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/reset-appearance.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/resize.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-counter.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-counters.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-general-info.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tablesort.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/core/modules/views/css/views.module.css?sm60al" /> <link rel="stylesheet" media="all" href="/modules/contrib/ckeditor5_plugin_pack/modules/ckeditor5_plugin_pack_indent_block/css/indent-block.css?sm60al" /> <link rel="stylesheet" media="all" href="/modules/contrib/extlink/css/extlink.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/css/base.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/css/cornell.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/css/cwd_slider.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/css/cwd_gallery.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/css/cwd_card_slider.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/css/cwd_utilities.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/fonts/font-awesome.min.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/fonts/material-design-iconic-font.min.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/fonts/cornell-custom.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/fonts/totally-cornered.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_base/css/drupal.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_itc/css/itc-base.css?sm60al" /> <link rel="stylesheet" media="all" href="/themes/custom/cwd_itc/css/ckeditor.css?sm60al" /> <link rel="stylesheet" media="all" href="https://use.typekit.net/nwp2wku.css" /> <script src="/core/assets/vendor/jquery/jquery.min.js?v=3.7.1"></script> <script src="/themes/custom/cwd_base/js/cwd_slider.js?sm60al"></script> </head> <body class="node-id-8349 node-type-knowledge_base_article path-node page-node-type-knowledge-base-article secondary-page cu-red sidebar sidebar-left"> <div id="skipnav"><a href="#main-article">Skip to main content</a></div> <div class="views-element-container block block-views block-views-blockactive-security-alert-block" id="block-views-block-active-security-alert-block"> <div> <div class="js-view-dom-id-6107542a81dcf61503df658059682ba28f3a560ad43f003b3185fa9ecc6d35b4 view view-active-security-alert view-display-id-block cwd-component cwd-basic"> </div> </div> </div> <header id="cu-header"> <div id="cu-search" class="cu-search"> <div class="container-fluid"> <form id="cu-search-form" method="get" tabindex="-1" role="search" action="https://www.cornell.edu/search/"> <label for="cu-search-query" class="sr-only">Search:</label> <input type="text" id="cu-search-query" name="stq" value="" size="30"> <button name="btnG" id="cu-search-submit" type="submit" value="go"><span class="sr-only">Submit Search</span></button> <fieldset class="search-filters" role="radiogroup"> <legend class="sr-only">Search Filters</legend> <input type="radio" id="cu-search-filter1" name="sitesearch" checked="checked"> <label for="cu-search-filter1"><span class="sr-only">Search </span>This Site</label> <input type="radio" id="cu-search-filter2" name="sitesearch" value="cornell"> <label for="cu-search-filter2"><span class="sr-only">Search </span>Cornell</label> </fieldset> </form> </div> </div> <div class="cu45-helper"></div> <div class="container-fluid cu-brand"> <h1 class="cu-logo"><a href="https://www.cornell.edu"><img class="sr-only" src="/themes/custom/cwd_base/images/cornell/bold_cornell_logo_simple_b31b1b.svg" alt="Cornell University" width="245" height="62"></a></h1> <div class="cu-unit"> <h2><a href="/">IT@Cornell</a></h2> </div> <div class="buttons"> <button class="mobile-button" id="mobile-nav">Main Menu</button> <button class="mobile-button" id="cu-search-button">Toggle Search Form</button> </div> <nav class="dropdown-menu dropdown-menu-on-demand" id="main-navigation" aria-label="Main Navigation"> <div class="container-fluid"> <a id="mobile-home" href="/"><span class="sr-only">Home</span></a> <ul class="menu list-menu links"> <li class="menu-item"> <a href="/news" data-drupal-link-system-path="news">News & Events</a> </li> <li class="menu-item"> <a href="/security-and-policy" data-drupal-link-system-path="node/28">Security</a> </li> <li class="menu-item"> <a href="/service-listing" data-drupal-link-system-path="service-listing">Services A-Z</a> </li> <li class="menu-item"> <a href="/about-itcornell" data-drupal-link-system-path="node/10309">About</a> </li> <li class="menu-item"> <a href="/support" data-drupal-link-system-path="node/1424">Help</a> </li> <li class="menu-item menu-item--expanded"> <a href="/quick-login" title="Log In to IT Services" data-drupal-link-system-path="node/10763">Quick Login</a> <ul class="menu list-menu links"> <li class="menu-item"> <a href="https://cornell.account.box.com/login">Box</a> </li> <li class="menu-item"> <a href="https://canvas.cornell.edu/">Canvas</a> </li> <li class="menu-item"> <a href="http://gsuite.cornell.edu/">Google Workspace (Student Email)</a> </li> <li class="menu-item"> <a href="http://outlook.cornell.edu/">Outlook on the Web</a> </li> <li class="menu-item"> <a href="http://cornell.qualtrics.com/">Qualtrics</a> </li> <li class="menu-item"> <a href="https://sft.cornell.edu/">Secure File Transfer</a> </li> <li class="menu-item"> <a href="https://cornell.zoom.us/">Zoom</a> </li> <li class="menu-item"> <a href="/quick-login/login-links" title="More quick login links" data-drupal-link-system-path="node/10267">More Login Links</a> </li> </ul> </li> </ul> </div> </nav> </div> </header> <div id="main-content" class="band"> <main id="main" class="container-fluid aria-target" tabindex="-1"> <div class="row"> <div id="sidebar-top" class="secondary"> <nav class="secondary-navigation drupal-section-navigation mobile-expander" aria-label="Section Navigation"> <ul class="menu"> <li class="menu-item"> <a href="/news" data-drupal-link-system-path="news">News & Events</a> </li> <li class="menu-item"> <a href="/security-and-policy" data-drupal-link-system-path="node/28">Security</a> </li> <li class="menu-item"> <a href="/service-listing" data-drupal-link-system-path="service-listing">Services A-Z</a> </li> <li class="menu-item"> <a href="/about-itcornell" data-drupal-link-system-path="node/10309">About</a> </li> <li class="menu-item"> <a href="/support" data-drupal-link-system-path="node/1424">Help</a> </li> <li class="menu-item menu-item--collapsed"> <a href="/quick-login" title="Log In to IT Services" data-drupal-link-system-path="node/10763">Quick Login</a> </li> </ul> </nav>  <div class="service-learn-more"> <div class="service-actions"> </div> <div class="service-articles secondary-section"> <h2>Security & Policy Articles</h2> <h3>Security & Policy</h3> <h4><a class="special-kba" href="/landing-page-kba/28/5571"> Working with High Risk Data</a></h4> <ul> <li><a href="/ferpa-and-it/information-protected-ferpa">Information Protected by FERPA</a></li> <li><a href="/security-and-policy/data-types-high-risk-moderate-risk-low-risk">Data Types (High Risk, Moderate Risk, Low Risk)</a></li> <li><a href="/security-and-policy/dispose-high-risk-data">Dispose of High Risk Data</a></li> </ul> <h4><a class="special-kba" href="/landing-page-kba/28/75">Protect University Data</a></h4> <ul> <li><a href="/security-and-policy/protect-evidence-possible-data-compromise">Protect Evidence of a Possible Data Compromise</a></li> <li><a href="/security-and-policy/report-security-incidents-compromised-data-virus-etc">Report Security Incidents (Compromised Data, Virus, etc.)</a></li> <li><a href="/policy/responsibilities-protect-university-data-policy-412">Responsibilities to Protect University Data (Policy 4.12)</a></li> </ul> <p><a class="link-button" href="/landing-page-kba/28">All Security & Policy Articles</a></p> </div> <div class="additional-information secondary-section"> <div class="detail-block audience"> <div> <h2>Available to:</h2> </div> <div> <a href="/audience/students" hreflang="en">Students</a>, <a href="/audience/staff" hreflang="en">Staff</a>, <a href="/audience/it-professionals" hreflang="en">IT Professionals</a>, <a href="/audience/faculty" hreflang="en">Faculty</a> </div> </div> </div> </div> </div> <article id="main-article" class="primary"> <div class="content-space"> <h1>Changes to Policy 5.10 Information Security</h1> <div class="service-list-heading"> <p> <span class="label-inline sans label"> This article applies to: </span> <a href="/security-and-policy">Security & Policy</a> </p> </div> <section> <div data-drupal-messages-fallback class="hidden"></div> <div class="anchor-list block block-table-of-contents block-text-long-field-toc-blocknodeknowledge-base-articlebody" id="block-tocforcontentkbarticlebody"> <h2>On This Page</h2> <ul><li><a href="#toc-data-class-2v2Ecjwx" class="toc-link toc-link-invalid-id">Data Classification Changes</a></li><li><a href="#toc-baseline-s-adn6aR5W" class="toc-link toc-link-invalid-id">Baseline Security Requirements</a></li><li><a href="#toc-updated-se-tlddUOO3" class="toc-link toc-link-invalid-id">Updated Security Procedures</a></li></ul> </div> <article data-history-node-id="8349" class="double-margin"> <p>There are important updates to <a href="https://www.dfa.cornell.edu/sites/default/files/vol5_10.pdf">Policy 5.10 Information Security</a>, that better align with our current technology and security environment. For more information, please read the revised policy.</p> <h2>Data Classification Changes</h2> <p>Data classifications names have changed from: </p> <ul> <li> <p>Confidential changed to <strong>High-Risk</strong></p> </li> <li> <p>Restricted changed to <strong>Moderate-Risk</strong></p> </li> <li> <p>Public changed to <strong>Low-Risk</strong> </p> </li> </ul> <h2>Baseline Security Requirements</h2> <p>There are new Baseline Security Requirements for:</p> <ul> <li> <p>Data Hygiene</p> </li> <li> <p>Encryption</p> </li> <li> <p>Authentication and Authorization</p> </li> </ul> <p>The policy also includes updated Network security requirements.</p> <h2>Updated Security Procedures</h2> <p>There are Updated Security Procedures for:</p> <ul> <li> <p>Endpoints</p> </li> <li> <p>Mobile Devices</p> </li> <li> <p>Servers</p> </li> <li> <p>Applications</p> </li> <li> <p>Paper documents</p> </li> </ul> </article> <div class="comment-area"> <h3>Comments?</h3> <p>To share feedback about this page or request support, <a href="/user/login?destination=/node/8349">log in</a> with your NetID</p> </div> </section> </div> </article> </div> </main> </div> <footer> <div class="main-footer"> <div class="container-fluid sidebar-left">  <div class="row"> <div class="primary"> <h2 class="sr-only">Quick Links</h2> <div class="two-col padded footer-links"> <div class="views-element-container block block-views block-views-blocknews-footer-news" id="block-views-block-news-footer-news"> <h2>Latest News</h2> <div> <div class="js-view-dom-id-7e65c2905af5e95ca0dd2c89633ff1c3e82f1744b6925cab5bf2f4ff5322b479 view view-news view-display-id-footer_news cwd-component cwd-basic cwd-news"> <div class="view-content cards"> <ul> <li> <div class="views-field views-field-title"><span class="field-content"><a href="/news/stay-cyber-safe-holiday-season" hreflang="en">Stay Cyber Safe This Holiday Season </a></span></div> </li> <li> <div class="views-field views-field-title"><span class="field-content"><a href="/news/new-cornell-video-demand-media-recycle-bin" hreflang="en">New for Cornell Video on Demand: Media Recycle Bin </a></span></div> </li> <li> <div class="views-field views-field-title"><span class="field-content"><a href="/news/immersive-media-medicine-symposium-december-12-13-2024" hreflang="en">Immersive Media in Medicine Symposium December 12-13, 2024</a></span></div> </li> </ul> </div> </div> </div> </div> <nav aria-labelledby="block-support-menu" id="block-support" class="block block-menu navigation menu--support"> <h2 id="block-support-menu">Support</h2> <ul> <li> <a href="/support" data-drupal-link-system-path="node/1424">Get Help</a> </li> <li> <a href="/training" data-drupal-link-system-path="node/282">IT Training</a> </li> <li> <a href="/phish-bowl" data-drupal-link-system-path="node/11122">Phishing (Fake) Emails</a> </li> <li> <a href="/verified-cornell-communications" data-drupal-link-system-path="node/11121">Verified Cornell Communications</a> </li> </ul> </nav> </div> </div> <div class="secondary"> <h2>Log In</h2> <ul class="custom no-bullet"> <li><a href="/cit-intranet">CIT Staff Intranet</a></li> <li><a href="/user/login">Log In or Log Out</a></li> </ul> <div class="footer-links"> </div> </div> <div class="content"> <div class="tertiary">  <div id="block-helpcontact-2" class="block block-block-content block-block-content8941f82e-cb76-43f0-b425-a736db0df3d7"> <div><h3 class="mobile-only">IT Service Desk</h3> <ul class="custom no-bullet inline"> <li><a class="link-button" href="https://tdx.cornell.edu/TDClient/39/Portal/Requests/TicketRequests/NewForm?ID=QgJWPHByjGo_&RequestorType=ServiceOffering">Submit Support Ticket</a></li> <li><span class="no-mobile">IT Service Desk: </span><a class="link-phone" href="tel:+1-607-255-5500">607-255-5500</a></li> <li><a href="https://tdx.cornell.edu/TDClient/39/Portal/Requests/TicketRequests/NewForm?ID=mFBEG9DZ4pg_&RequestorType=ServiceOffering">Give us website feedback</a></li> </ul> </div> </div> </div> </div> </div> </div> </div> <div class="sub-footer"> <div class="container-fluid"> <div class="row"> <div id="block-accessabilityfooter" class="block block-block-content block-block-content10a2511a-7f1b-44e4-bb7f-b809800c48fa"> <div><div class="two-col"> <div> <ul class="custom inline no-bullet"> <li><a href="https://privacy.cornell.edu/">University Privacy</a></li> </ul> </div> <div> <ul class="custom inline no-bullet"> <li><a href="https://accessibility.cornell.edu/information-technology/web-accessibility/web-accessibility-assistance/">Web Accessibility Assistance</a></li> </ul> </div> </div> </div> </div> </div> </div> </div> </footer>  <script type="text/javascript" src="https://bot.ivy.ai/bot/script/category/kW5ynaqN9DrA43lq0zGQdR0BbXOmLxz7" referrerpolicy="no-referrer-when-downgrade" async></script> <script type="text/javascript"> /*<![CDATA[*/ (function() { var sz = document.createElement('script'); sz.type = 'text/javascript'; sz.async = true; sz.src = '//siteimproveanalytics.com/js/siteanalyze_6120104.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(sz, s); })(); /*]]>*/ </script>  <div class="cookieConsentContainer hide" id="cookieConsentContainer"> <div class="cookieDesc"> <p>At Cornell we value your privacy. To view <br>our university's privacy practices, including <br>information use and third parties, visit <a href="https://privacy.cornell.edu/">University Privacy</a>.</p> </div> <button id="cookieButton">Thanks for letting me know</button> </div> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"node\/8349","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"google_analytics":{"account":"G-QD92JX5J14","trackOutbound":true,"trackMailto":true,"trackTel":true,"trackDownload":true,"trackDownloadExtensions":"7z|aac|arc|arj|asf|asx|avi|bin|csv|doc(x|m)?|dot(x|m)?|exe|flv|gif|gz|gzip|hqx|jar|jpe?g|js|mp(2|3|4|e?g)|mov(ie)?|msi|msp|pdf|phps|png|ppt(x|m)?|pot(x|m)?|pps(x|m)?|ppam|sld(x|m)?|thmx|qtm?|ra(m|r)?|sea|sit|tar|tgz|torrent|txt|wav|wma|wmv|wpd|xls(x|m|b)?|xlt(x|m)|xlam|xml|z|zip"},"data":{"extlink":{"extTarget":false,"extTargetAppendNewWindowLabel":"(opens in a new window)","extTargetNoOverride":false,"extNofollow":false,"extNoreferrer":true,"extFollowNoOverride":false,"extClass":"ext","extLabel":"(link is external)","extImgClass":false,"extSubdomains":true,"extExclude":"","extInclude":"","extCssExclude":".link-button, .no-ext","extCssInclude":"","extCssExplicit":"","extAlert":false,"extAlertText":"This link will take you to an external web site. We are not responsible for their content.","extHideIcons":false,"mailtoClass":"mailto","telClass":"","mailtoLabel":"(link sends email)","telLabel":"(link is a phone number)","extUseFontAwesome":false,"extIconPlacement":"after","extFaLinkClasses":"fa fa-external-link","extFaMailtoClasses":"fa fa-envelope-o","extAdditionalLinkClasses":"","extAdditionalMailtoClasses":"","extAdditionalTelClasses":"","extFaTelClasses":"fa fa-phone","whitelistedDomains":[],"extExcludeNoreferrer":""}},"tableOfContents":[{"fieldName":"body","selector":"h2"}],"ckeditor5Premium":{"isMediaInstalled":true},"user":{"uid":0,"permissionsHash":"8505324a09a5aaac2c3f6072b85b5ef5a76ef24de903b01fd8f230daa9ef3eaf"}}</script> <script src="/core/misc/drupalSettingsLoader.js?v=10.3.6"></script> <script src="/core/misc/drupal.js?v=10.3.6"></script> <script src="/core/misc/drupal.init.js?v=10.3.6"></script> <script src="/modules/contrib/google_analytics/js/google_analytics.js?v=10.3.6"></script> <script src="/themes/custom/cwd_base/js/contrib/jquery.detect_swipe.js?sm60al"></script> <script src="/themes/custom/cwd_base/js/contrib/pep.js?sm60al"></script> <script src="/themes/custom/cwd_base/js/cwd.js?sm60al"></script> <script src="/themes/custom/cwd_base/js/cwd_utilities.js?sm60al"></script> <script src="/themes/custom/cwd_base/js/cwd_gallery.js?sm60al"></script> <script src="/themes/custom/cwd_base/js/cwd_popups.js?sm60al"></script> <script src="/themes/custom/cwd_base/js/cwd_card_slider.js?sm60al"></script> <script src="/themes/custom/cwd_itc/js/itc-base.js?sm60al"></script> <script src="/modules/contrib/extlink/js/extlink.js?v=10.3.6"></script> <script src="/modules/non-composer/table_of_contents/table_of_contents.js?v=1.0.0"></script>  <script src="https://embanner.univcomm.cornell.edu/OWC-emergency-banner.js" type="text/javascript" async></script> </body> </html>

CINXE.COM

Changes to Policy 5.10 Information Security | IT@Cornell