CINXE.COM

<!DOCTYPE html>      <html lang="en" dir="ltr">  <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <link rel="shortcut icon" href="https://uit.stanford.edu/sites/all/themes/stanford_uit/favicon.ico" type="image/vnd.microsoft.icon" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-57x57.png" rel="apple-touch-icon" sizes="57x57" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-72x72.png" rel="apple-touch-icon" sizes="72x72" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-76x76.png" rel="apple-touch-icon" sizes="76x76" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-114x114.png" rel="apple-touch-icon" sizes="114x114" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-120x120.png" rel="apple-touch-icon" sizes="120x120" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-144x144.png" rel="apple-touch-icon" sizes="144x144" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-152x152.png" rel="apple-touch-icon" sizes="152x152" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-167x167.png" rel="apple-touch-icon" sizes="167x167" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon-180x180.png" rel="apple-touch-icon" sizes="180x180" /> <link href="/sites/all/themes/stanford_framework/apple-touch-icon.png" rel="apple-touch-icon" /> <meta name="generator" content="Drupal 7 (http://drupal.org)" /> <link rel="canonical" href="https://uit.stanford.edu/guide/riskclassifications" /> <link rel="shortlink" href="https://uit.stanford.edu/guide/riskclassifications" />  <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Risk Classifications | University IT</title> <link type="text/css" rel="stylesheet" href="https://uit.stanford.edu/sites/default/files/css/css_xE-rWrJf-fncB6ztZfd2huxqgxu4WO-qwma6Xer30m4.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://uit.stanford.edu/sites/default/files/css/css_sIkGnjhtZ5uGBnmjzIrTmLLJday6eHWbyq4U32FzR78.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://uit.stanford.edu/sites/default/files/css/css_DjBkQadQf8VxoEvGf_8IrMW1qUIOgfus-O7q2P6cWHk.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://uit.stanford.edu/sites/default/files/css/css_4Q1cxJjHs-M9isInNUSBeH3mBmktQdwn-z538kNwEGE.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://uit.stanford.edu/sites/default/files/css/css_nGZ0EUi6HATidAf3pITrpLdyTGtTsmfVAzXLpUp2gr4.css" media="print" /> <link type="text/css" rel="stylesheet" href="https://uit.stanford.edu/sites/all/themes/stanford_uit/css/stanford_uit_custom.css?snek01" media="all" /> <link type="text/css" rel="stylesheet" href="https://uit.stanford.edu/sites/default/files/css/css_mC0Zwir_oMI9cXU9EExjNvKuqcXN3vHUezv2bFFx--s.css" media="all" /> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_2KlXA4Z5El1IQFVPxDN1aX5mIoMSFWGv3vwsP77K9yk.js"></script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_Pt6OpwTd6jcHLRIjrE-eSPLWMxWDkcyYrPTIrXDSON0.js"></script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_rB8IdJvuhw_DIhSlb6KPrfW_7D-pmfNlEilkjj7wgwI.js"></script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_LluCmNfuwAoMEd8TbPdY_UwTQeybIdnc-wdifJ62B-I.js"></script> <script type="text/javascript" src="https://www.googletagmanager.com/gtag/js?id=UA-2886499-18"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_bMNcqAqOcpVB4VGYw6F9HDONHfb363vwhq0fr67kcxM.js"></script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_qOHrtczjUEdc7vDW6IxlOsvpWIKfggAq7rig0E8uG5Y.js"></script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_ocJp8u-LYNKIUDGE7OkCexHBmChZsD2uQeIkqguAXf8.js"></script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js_injector/js_injector_26.js?snek01"></script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_edqsFCRTz6TPRnil_ng8vyG_uIl4qfg68X_XnooWVOk.js"></script> <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js_injector/js_injector_59.js?snek01"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script>    </head> <body class="html not-front not-logged-in no-sidebars page-node page-node- page-node-24632 node-type-guide style-uit header-bkg-image header-bkg-text-light full-width-guide subsite-nav" > <noscript aria-hidden="true"><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-5Z988HL" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <div id="wrap"><a href="#main" class="element-invisible element-focusable">Skip to content</a> <a href="#header-nav" class="element-invisible element-focusable">Skip to site navigation</a> <a href="#main-nav" class="element-invisible element-focusable">Skip to service navigation</a>    <div id="header" class="clearfix header" role="banner"> <div class="container"> <div class="row-fluid"> <div class="span4"> <div id="logo" class="logo-mobile "> <a href="/" title="Home" rel="home"> <img src="/sites/all/themes/stanford_uit/logo.svg" alt="Stanford"> </a> </div>  <div id="name-and-slogan" class="with-logo"> <div id="site-name" class="site-name"><a href="/" title="Home" rel="home">University IT</a></div> </div>   </div> <div class="span8"> <div id="header-menu"> <div class="navbar"> <div class="navbar-inner"> <button aria-label="Navigation menu" class="btn btn-navbar collapsed" data-toggle="collapse" data-target=".nav-collapse"> <span class="hide">Navigation menu</span> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <div class="nav-collapse collapse"> <nav id="header-nav" role="navigation" aria-label="Site"> <ul class="menu nav"><li class="first expanded dropdown"><a href="https://uit.stanford.edu/services" class="dropdown-toggle" data-toggle="dropdown" data-target="#">Explore services <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="/services">View all services</a></li> <li class="last leaf"><a href="https://uit.stanford.edu/guide/riskclassifications#security-approved-services">View services approved for High Risk Data</a></li> </ul></li> <li class="expanded dropdown"><a href="https://uit.stanford.edu" class="dropdown-toggle" data-toggle="dropdown" data-target="#">I want to ... <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="/videoconferencing">Use video conferencing tools</a></li> <li class="leaf"><a href="/service/techtraining/schedule">Get IT training</a></li> <li class="leaf"><a href="/service/gsuite/google-forms">Create web forms and surveys</a></li> <li class="leaf"><a href="/emailcalendar/config">Set up email</a></li> <li class="leaf"><a href="/service/authentication/twostep">Set up two-step authentication</a></li> <li class="leaf"><a href="/service/sponsorship/person">Sponsor a SUNet ID</a></li> <li class="leaf"><a href="https://software.stanford.edu">Get software</a></li> <li class="leaf"><a href="/guide/connecting-to-network">Connect to the network</a></li> <li class="leaf"><a href="/service/mobiledevice/management">Secure my mobile device</a></li> <li class="leaf"><a href="/guide/website/hosting" class="menu-node-unpublished menu-node-unpublished">Get website hosting</a></li> <li class="leaf"><a href="/guide/website">Publish a website</a></li> <li class="last leaf"><a href="/guide/tools">Get started with IT at Stanford</a></li> </ul></li> <li class="expanded dropdown"><a href="/" class="dropdown-toggle" data-toggle="dropdown" data-target="#">Log into ... <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="https://webmail.stanford.edu">Email and calendar</a></li> <li class="leaf"><a href="https://stanford.zoom.us">Zoom video conferencing</a></li> <li class="leaf"><a href="https://stanfordmedicine.box.com/">Medicine Box file storage</a></li> <li class="leaf"><a href="https://mailman.stanford.edu/mailman/ownerlistinfo">Mailing lists</a></li> <li class="leaf"><a href="https://accounts.stanford.edu">Stanford Accounts</a></li> <li class="leaf"><a href="https://mydevices.stanford.edu">MyDevices</a></li> <li class="leaf"><a href="https://stanforduniversity.qualtrics.com/">Qualtrics survey tool</a></li> <li class="leaf"><a href="https://drive.google.com/a/stanford.edu">Google Drive</a></li> <li class="leaf"><span class="separator"><hr></span></li> <li class="last leaf"><a href="/guide/single-sign-on">Understanding single sign on</a></li> </ul></li> <li class="leaf"><a href="https://stanford.service-now.com/services?id=services_status">View alerts</a></li> <li class="last expanded dropdown"><a href="https://stanford.service-now.com/it_services" class="dropdown-toggle" data-toggle="dropdown" data-target="#">Get support <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="https://stanford.service-now.com/it_services?id=kb_home">Find answers</a></li> <li class="leaf"><a href="https://uit.stanford.edu/security/report-incident">Report a security incident</a></li> <li class="leaf"><a href="https://stanford.service-now.com/it_services?id=sc_home">Request something</a></li> <li class="last leaf"><a href="https://stanford.service-now.com/services?id=get_help">Get help</a></li> </ul></li> </ul> <div id="search-icon"><button id="search-button"><span class="element-invisible">Open Search</span></button></div> <div id="google-search"> <div class="region region-search-box clearfix"> <div id="block-its-search-its-search-search" class="clearfix block block-its-search"> <div class="content"> <gcse:searchbox-only linktarget="https://uit.stanford.edu" queryparametername="q_as"></gcse:searchbox-only> </div> </div></div>  </div> </nav> </div> </div> </div> </div> </div> </div> </div> <div id="main-menu" class="clearfix site-main-menu"> <div class="container"> <div class="navbar"> <div class="navbar-inner"> <div class="nav-collapse collapse"> <nav id="main-nav" role="navigation"> <div class="region region-navigation clearfix"> <div id="block-menu-menu-security-category" class="clearfix block block-menu"> <h2><a href="/security" class="block-title-link">Information Security</a></h2> <div class="content"> <ul class="menu nav"><li class="first expanded dropdown"><a href="/organization/information-security-office" class="menu-node-unpublished menu-node-unpublished menu-node-unpublished menu-node-unpublished dropdown-toggle" data-toggle="dropdown" data-target="#">About Us <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="/security/team" class="restricted">Meet the team</a></li> <li class="leaf"><a href="https://stanford.service-now.com/it_services?id=sc_cat_item&sys_id=f7ae081a13bce2008a9175c36144b0ad">Contact Us</a></li> <li class="last leaf"><a href="https://uit.stanford.edu/security/team#section_3753">View all ISO services</a></li> </ul></li> <li class="expanded dropdown"><a href="/security/getting-started" class="dropdown-toggle" data-toggle="dropdown" data-target="#">Guides <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><span class="nolink" tabindex="0">Data Security</span></li> <li class="leaf"><a href="/security/copyright-infringement">Copyright infringement</a></li> <li class="leaf"><a href="/service/crashplan">File and data backup</a></li> <li class="leaf"><a href="/service/secureemail">High risk data in email</a></li> <li class="leaf"><a href="/security/identity-theft">Identity theft</a></li> <li class="leaf"><a href="/security/travel">International travel</a></li> <li class="leaf"><a href="/security/sysadmin">IT system administrator guidance</a></li> <li class="leaf"><a href="/service/password-manager">Password manager</a></li> <li class="leaf"><a href="/security/stay-safe-from-phishing">Phishing awareness</a></li> <li class="leaf"><a href="/security/positionpapers">Position papers</a></li> <li class="leaf"><a href="/security/sensitivedata">Protecting sensitive data</a></li> <li class="leaf"><a href="/security/responsibleai">Responsible AI at Stanford</a></li> <li class="leaf"><a href="/security/asp">Third party security requirements</a></li> <li class="leaf"><a href="/security/resources">Other Stanford security resources</a></li> <li class="leaf"><span class="separator"><hr></span></li> <li class="leaf"><span class="nolink" tabindex="0">Device Security</span></li> <li class="leaf"><a href="/security/exception">Compliance exception</a></li> <li class="leaf"><a href="/guide/encrypt/config">Encrypt your device</a></li> <li class="leaf"><a href="/service/mobiledevice/management">Mobile device security</a></li> <li class="last leaf"><a href="/service/mydevices">View your Stanford-registered devices</a></li> </ul></li> <li class="expanded active-trail dropdown"><a href="/guide/riskclassifications" class="active-trail dropdown-toggle active" data-toggle="dropdown" data-target="#">Policies <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="/security/data-sanitization">Data Sanitization</a></li> <li class="leaf"><a href="/guide/encrypt">Encryption at Stanford</a></li> <li class="leaf"><a href="/guide/securitystandards">Minimum Security Standards</a></li> <li class="leaf"><a href="https://pcicompliance.stanford.edu/">Payment Card Industry (PCI)</a></li> <li class="leaf active-trail"><a href="/guide/riskclassifications" class="active-trail active">Risk Classifications</a></li> <li class="leaf"><a href="https://uit.stanford.edu/guide/riskclassifications#security-approved-services">Risk Classifications: Approved Services</a></li> <li class="last leaf"><a href="https://adminguide.stanford.edu/chapters/computing/information-security/information-security">Stanford Information Security Policy</a></li> </ul></li> <li class="expanded dropdown"><a href="/security/dra" class="dropdown-toggle" data-toggle="dropdown" data-target="#">Privacy <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="/security/dra">Data Risk Assessment (DRA)</a></li> <li class="leaf"><a href="/security/hipaa">HIPAA</a></li> <li class="leaf"><a href="/FERPA-Policy">FERPA</a></li> <li class="last leaf"><a href="https://privacy.stanford.edu">University Privacy Office</a></li> </ul></li> <li class="expanded dropdown"><a href="/security/internship" class="dropdown-toggle" data-toggle="dropdown" data-target="#">Programs <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="/service/phishingawareness">Phishing Awareness Program</a></li> <li class="leaf"><a href="/security/bug-bounty">Bug Bounty Program</a></li> <li class="leaf"><a href="/security/vulnerability-disclosure">Vulnerability Disclosure Program</a></li> <li class="last leaf"><a href="/security/cyberfest/2024">Cybersecurity and Privacy Festival</a></li> </ul></li> <li class="last expanded dropdown"><a href="https://www.cisa.gov/news-events/cybersecurity-advisories" class="dropdown-toggle" data-toggle="dropdown" data-target="#">Security Alerts <span class="caret"></span></a><ul class="dropdown-menu"><li class="first leaf"><a href="https://www.cisa.gov/news-events/cybersecurity-advisories">Cybersecurity alerts and advisories</a></li> <li class="last leaf"><a href="/guide/sunset-schedule">Service and Software Sunset Schedule</a></li> </ul></li> </ul> </div> </div></div>  </nav> </div> </div> </div> </div> </div>  </div>  <div id="fullwidth-top" class="row-fluid fullwidth"> <section class="hero " style="background-image: url(https://uit.stanford.edu/sites/default/files/styles/hero/public/banners/riskclassifications-banner.jpg?itok=tzMm5WSF);"> <div class="hero-content"> <h1>Risk Classifications</h1> <p><p>Stanford is committed to protecting the privacy of its students, alumni, faculty and staff, as well as protecting the confidentiality, integrity, and availability of information important to the University's mission.</p> </p> <div class="hero-link"> </div> </div> </section> </div> <div id="main" class="clearfix main" role="main"> <div class="container"> <div id="main-content" class="row main-content"> <div id="content-title" class="span12"> </div> <div id="content" class="mc-content span12"> <div id="content-wrapper" class="content-wrapper"> <div id="content-head" class="row-fluid content-head"> </div> <div id="content-body" class="row-fluid content-body"> <div class="region region-content clearfix"> <div id="block-system-main" class="clearfix block block-system"> <div class="content"> <article id="node-24632" class="node node-guide clearfix"> <div class="content"> </div> </article> </div> </div></div>  </div> </div>  </div>  </div> </div> </div>  <div id="fullwidth-bottom" class="row-fluid fullwidth"> <div class="container"> <div class="region region-fullwidth-bottom clearfix"> <div id="block-views-guide-menu-block" class="clearfix block block-views"> <div class="content"> <div class="view view-guide-menu view-id-guide_menu view-display-id-block view-dom-id-be3fd2007a153f2cbde9207754dcb212"> <div class="view-content"> <div class="secondary-nav"> <div class="item-list"><ul><li class="first"><a href="https://uit.stanford.edu/guide/riskclassifications#risk-classifications">Risk Classifications</a></li> <li><a href="https://uit.stanford.edu/guide/riskclassifications#data-classification-examples">Data Risk Classifications Examples</a></li> <li><a href="https://uit.stanford.edu/guide/riskclassifications#server-classification-examples">Server Examples</a></li> <li><a href="https://uit.stanford.edu/guide/riskclassifications#application-classification-examples">Application Examples</a></li> <li class="last"><a href="https://uit.stanford.edu/guide/riskclassifications#security-approved-services">Approved Services</a></li> </ul></div> </div> </div> </div> </div> </div><div id="block-views-guide-sections-block" class="clearfix block block-views"> <div class="content"> <div class="view view-guide-sections view-id-guide_sections view-display-id-block view-dom-id-620c269c0c6044a8d81f306b9467b12f"> <div class="view-content"> <div id="section_2492" class="section"> <section class="section-bg-white"> <div class="section-body"> <p>Stanford has classified its information assets into risk-based categories for the purpose of determining who is allowed to access the information and what security precautions must be taken to protect it against unauthorized access.</p> <p>As of May 2015, a new set of classifications has been established and is now in effect for Stanford data and systems: <strong>Low Risk</strong>, <strong>Moderate Risk</strong>, and <strong>High Risk</strong>. The former framework — Prohibited, Restricted, Confidential, and Unrestricted — was phased out in January 2016.</p> <div class="alert alert-info"> <p><strong>Special note to Stanford researchers:</strong> Except for regulated data such as Protected Health Information (PHI), Social Security Numbers (SSNs), and financial account numbers, research data and systems predominately fall into the Low Risk classification. Review the classification definitions and examples below to determine the appropriate risk level to apply. See <a href="https://doresearch.stanford.edu/policies/research-policy-handbook/conduct-research/information-security">Research Policy Handbook Section 1.10</a> for information security practices and guidelines specific to research computing systems.</p> </div> <p>In addition to understanding risk classifications, for Moderate and High Risk Data, be sure to take <em>all</em> necessary steps to <a href="/security/sensitivedata">protect sensitive data at Stanford</a>.</p> <div class="row-fluid"> <div class="span4"> <div class="column card card-green"> <h3>Low Risk</h3> <p>Data and systems are classified as Low Risk if they are not considered to be Moderate or High Risk, and:</p> <ol> <li>The data is intended for public disclosure, or</li> <li>The loss of confidentiality, integrity, or availability of the data or system would have no adverse impact on our mission, safety, finances, or reputation.</li> </ol> </div> </div> <div class="span4"> <div class="column card card-orange"> <h3>Moderate Risk</h3> <p>Data and systems are classified as Moderate Risk if they are not considered to be High Risk, and:</p> <ol> <li>The data is not generally available to the public, or</li> <li>The loss of confidentiality, integrity, or availability of the data or system could have a mildly adverse impact on our mission, safety, finances, or reputation.</li> </ol> </div> </div> <div class="span4"> <div class="column card card-red"> <h3>High Risk</h3> <p>Data and systems are classified as High Risk if:</p> <ol> <li>Protection of the data is required by law/regulation,</li> <li>Stanford is required to self-report to the government and/or provide notice to the individual if the data is inappropriately accessed, or</li> <li>The loss of confidentiality, integrity, or availability of the data or system could have a significant adverse impact on our mission, safety, finances, or reputation.</li> </ol> </div> </div> </div> <div class="section-link"></div> </div> </section> </div> <div id="section_2496" class="section"> <section class="section-bg-gray"> <div class="section-body"> <h2 > <i class="fa fa-database fa-2x" aria-hidden="true"></i>Data Risk Classification Examples </h2> <p>Use the examples below to determine which risk classification is appropriate for a particular type of data. When mixed data falls into multiple risk categories, use the highest risk classification across all.</p> <p class="center"><a href="/guide/securitystandards#security-standards-endpoints">View Minimum Security Standards: Endpoints</a></p> <div class="row-fluid"> <div class="span4"> <div class="column card card-green"> <h3>Low Risk</h3> <ul> <li>Research data (at data owner's discretion)</li> <li>SUNet IDs</li> <li>Information authorized to be available on or through Stanford's website without SUNet ID authentication</li> <li>Policy and procedure manuals designated by the owner as public</li> <li>Job postings</li> <li>University contact information not designated by the individual as "private" in StanfordYou</li> <li>Information in the public domain</li> <li>Publicly available campus maps</li> </ul> </div> </div> <div class="span4"> <div class="column card card-orange"> <h3>Moderate Risk</h3> <ul> <li>Unpublished research data (at data owner's discretion)</li> <li>Student records and admission applications</li> <li>Faculty/staff employment applications, personnel files, benefits, salary, birth date, personal contact information</li> <li>Non-public Stanford policies and policy manuals</li> <li>Non-public contracts</li> <li>Stanford internal memos and email, non-public reports, budgets, plans, financial info</li> <li>University and employee ID numbers</li> <li>Project/Task/Award (PTA) numbers</li> <li>Engineering, design, and operational information regarding Stanford infrastructure</li> </ul> </div> </div> <div class="span4"> <div class="column card card-red"> <h3>High Risk</h3> <ul> <li>Health Information, including Protected Health Information (PHI)</li> <li>Health Insurance policy ID numbers</li> <li>Social Security Numbers</li> <li>Credit card numbers</li> <li>Financial account numbers</li> <li>Export controlled information</li> <li>Driver's license numbers</li> <li>Passport and visa numbers</li> <li>Donor contact information and non-public gift information</li> </ul> </div> </div> </div> <div class="section-link"></div> </div> </section> </div> <div id="section_2500" class="section"> <section class="section-bg-white"> <div class="section-body"> <h2 > <i class="fa fa-server fa-2x" aria-hidden="true"></i>Server Risk Classification Examples </h2> <p class="center">A server is defined as a host that provides a network accessible service.</p> <p class="center"><a href="/guide/securitystandards#security-standards-servers">View Minimum Security Standards: Servers</a></p> <div class="row-fluid"> <div class="span4"> <div class="column card card-green"> <h3>Low Risk</h3> <ul> <li>Servers used for research computing purposes without involving Moderate or High Risk Data</li> <li>File server used to store published public data</li> <li>Database server containing SUNet IDs only</li> </ul> </div> </div> <div class="span4"> <div class="column card card-orange"> <h3>Moderate Risk</h3> <ul> <li>Servers handling Moderate Risk Data</li> <li>Database of non-public University contracts</li> <li>File server containing non-public procedures/documentation</li> <li>Server storing student records</li> </ul> </div> </div> <div class="span4"> <div class="column card card-red"> <h3>High Risk</h3> <ul> <li>Servers handling High Risk Data</li> <li>Servers managing access to High Risk systems</li> <li>University IT and departmental email systems</li> <li>Core campus infrastructure</li> </ul> </div> </div> </div> <div class="section-link"></div> </div> </section> </div> <div id="section_2504" class="section"> <section class="section-bg-gray"> <div class="section-body"> <h2 > <i class="fa fa-download fa-2x" aria-hidden="true"></i>Application Risk Classification Examples </h2> <p class="center">An application is defined as software running on a server that is network accessible.</p> <p class="center"><a href="/guide/securitystandards#security-standards-applications">View Minimum Security Standards: Applications</a></p> <div class="row-fluid"> <div class="span4"> <div class="column card card-green"> <h3>Low Risk</h3> <ul> <li>Applications handling Low Risk Data</li> <li>Online maps</li> <li>University online catalog displaying academic course descriptions</li> <li>Bus schedules</li> </ul> </div> </div> <div class="span4"> <div class="column card card-orange"> <h3>Moderate Risk</h3> <ul> <li>Applications handling Moderate Risk Data</li> <li>Human Resources application that stores salary information</li> <li>Directory containing phone numbers, email addresses, and titles</li> <li>University application that distributes information in the event of a campus emergency</li> <li>Online application for student admissions</li> </ul> </div> </div> <div class="span4"> <div class="column card card-red"> <h3>High Risk</h3> <ul> <li>Applications handling High Risk Data</li> <li>Human Resources application that stores employee SSNs</li> <li>Application that stores campus network node information</li> <li>Application collecting personal information of donor, alumnus, or other individual</li> <li>Application that processes credit card payments</li> </ul> </div> </div> </div> <div class="section-link"></div> </div> </section> </div> <div id="section_2505" class="section"> <section class="section-bg-white"> <div class="section-body"> <h2 > <i class="fa fa-check-square-o fa-2x" aria-hidden="true"></i>Approved Services </h2> <p class="center margin-bottom-50">This table indicates which classifications of data are allowed on a selection of commonly used Stanford University IT services.</p> <div class="alert alert-info"> <div class="row-fluid margin-top-0 padding-top-0"> <div class="span6"> <dl class="linebreak"> <dt><i class="fa fa-check fa-high-risk margin-right-10 margin-bottom-10" aria-hidden="true"></i>High Risk Non-PHI Data</dt> <dd>Payment Card Industry (PCI) data has special regulatory requirements that preclude using the services below. Contact the <a href="https://pcicompliance.stanford.edu/">PCI team</a> for assistance with handling this type of data.</dd> </dl> </div> <div class="span6"> <dl class="linebreak"> <dt><i class="fa fa-check fa-high-risk-phi margin-right-10 margin-bottom-10" aria-hidden="true"></i>High Risk PHI Data</dt> <dd>Protected Health Information (PHI) data has special regulatory requirements that govern using the services below. Contact the <a href="https://uit.stanford.edu/security/dra">DRA team</a> for assistance handling this type of data.</dd> </dl> </div> </div> </div> <p class="center"><input id="input-filter" onkeyup="filterTable()" placeholder="Filter by service..." style="width: 50%; font-size: 16px; padding: 12px 20px; margin: 2em 0;" type="text" /></p> <table class="table table-striped dataclass" id="tablesort"> <thead> <tr> <th class="standards" scope="column">Stanford Service</th> <th class="low-risk" scope="column" style="width: 15%;">Low Risk</th> <th class="moderate-risk" scope="column" style="width: 15%;">Moderate Risk</th> <th class="high-risk" scope="column" style="width: 15%;">High Risk: Non‑PHI</th> <th class="high-risk-phi" scope="column" style="width: 15%;">High Risk: PHI</th> </tr> </thead> <tbody> <tr> <th scope="row">Audio and Video Conferencing: <a href="https://uit.stanford.edu/videoconferencing">Zoom and WebEx</a>, <a href="https://uit.stanford.edu/service/office365/teams">Microsoft Teams</a> <br /> <span style="font-weight: 700; font-size: 15px; letter-spacing: 0.16px; text-align: center; background-color: rgb(242, 241, 235);">IMPORTANT:</span><span style="font-size: 15px; letter-spacing: 0.16px; text-align: center; background-color: rgb(242, 241, 235);"> Teams is only approved for PHI data with </span><a href="https://uit.stanford.edu/service/cardinalkey">Cardinal Key</a><span style="font-size: 15px; letter-spacing: 0.16px; text-align: center; background-color: rgb(242, 241, 235);">.</span></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Backups: <a href="https://uit.stanford.edu/service/bars">Backup and Recovery Service for Servers (BaRS)</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Backups: <a href="https://uit.stanford.edu/service/crashplanproe">CrashPlanPROe</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Calendar: <a href="https://uit.stanford.edu/service/office365">Office 365</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row"><a href="https://uit.stanford.edu/service/cardinal-fax">Cardinal Fax</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row"><a href="https://uit.stanford.edu/service/cardinal-print">Cardinal Print</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Cloud Infrastructure: <a href="https://uit.stanford.edu/cardinal-cloud/aws-organization">Amazon Web Services</a>, Microsoft Azure, <a href="https://uit.stanford.edu/service/cloudacctmgmt/gcp-setup">Google Cloud Platform</a><br /> <small><strong>IMPORTANT:</strong> Only approved for High-Risk & PHI data with the provision set up by UIT, and configured and managed by a Stanford professional services team. (e.g. <a href="https://srcc.stanford.edu/">Stanford Research Computing</a> or <a href="https://uit.stanford.edu/tcg">TCG)</a>  Only HIPAA-approved services allowed for PHI-containing cloud accounts. See <a href="https://cloud.google.com/security/compliance/hipaa#covered-products">GCP</a> and <a href="https://aws.amazon.com/compliance/hipaa-eligible-services-reference/">AWS</a>.</small></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Content Management: <a href="https://uit.stanford.edu/service/sudomains">Stanford Domains</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td><span class="element-invisible">Not approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Content Management: <a href="/service/stanfordsites">Drupal (Stanford Sites)</a>, <a href="/service/wordpress">WordPress</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Content Management: <a href="https://uit.stanford.edu/service/opentext">OpenText</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for high risk data</span></td> </tr> <tr> <th scope="row">Database Hosting: <a href="https://uit.stanford.edu/service/sql">MySQL</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Document Management: <a href="https://uit.stanford.edu/service/office365">Office 365 OneDrive</a>, <a href="https://uit.stanford.edu/service/office365/sharepoint">SharePoint</a><br /> <span style="font-weight: 700; font-size: 15px; letter-spacing: 0.16px; text-align: center; background-color: rgb(242, 241, 235);">IMPORTANT:</span><span style="font-size: 15px; letter-spacing: 0.16px; text-align: center; background-color: rgb(242, 241, 235);"> Only approved for PHI data with </span><a href="https://uit.stanford.edu/service/cardinalkey" style="color: rgb(46, 45, 41); border-bottom: 1px dotted rgb(46, 45, 41); font-size: 15px; letter-spacing: 0.16px; text-align: center; background-color: rgb(242, 241, 235);">Cardinal Key</a><span style="font-size: 15px; letter-spacing: 0.16px; text-align: center; background-color: rgb(242, 241, 235);">.</span></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Document Management: <a href="https://uit.stanford.edu/service/box">Medicine Box</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Document Management: <a href="https://uit.stanford.edu/service/gsuite/drive">Google Drive</a> (including <a href="https://uit.stanford.edu/service/gsuite/teamdrive">Shared Drives</a>, Docs, Sheets, Slides, and Forms)<br /> <small><strong>IMPORTANT:</strong> Only approved for PHI data with <a href="https://uit.stanford.edu/service/cardinalkey/googledrive">Cardinal Key with Google Drive</a>.</small></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Document Management: <a href="https://uit.stanford.edu/service/googleapps">Google G Suite: All others (Photos, Jamboard, Sites, etc...)</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Electronic Data Capture (EDC): <a href="http://redcap.stanford.edu" target="_top">REDCap</a>, Forte, REDCap Cloud<br /> <small><strong>Note:</strong> Compliant with Title 21 CFR Part 11.</small></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Electronic Signature: <a href="https://uit.stanford.edu/service/digitalsignature">AdobeSign</a><br /> <small><strong>IMPORTANT:</strong> Only approved for PHI data with the system configuration set up by <a href="https://stanford.service-now.com/services?id=get_help&cmdb_ci=9b8752f4db8c1f88c6e1f3d51d96190c">UIT</a>.</small></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Electronic Signature: DocuSign</th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Email: <a href="https://uit.stanford.edu/service/secureemail">Google Mail, Office365</a> (with “Secure:” in subject line)</th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Email: <a href="https://uit.stanford.edu/service/googleapps">Google Mail</a>, <a href="https://uit.stanford.edu/service/office365">Office365</a> (without “Secure:” in subject line)</th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Email: Other Departmental Systems</th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Encryption: <a href="https://uit.stanford.edu/service/mobiledevice/management">MDM Compliant Device</a>, <a href="https://uit.stanford.edu/service/registration">Stanford Device Registration Compliant Device</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Encryption: <a href="https://uit.stanford.edu/service/vlre">VLRE Compliant Device</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">File Storage: <a href="https://uit.stanford.edu/service/afs">AFS</a>, <a href="https://uit.stanford.edu/service/storage/file">CIFS</a>, <a href="https://uit.stanford.edu/service/storage/file">NFS</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">File Storage: <a href="https://uit.stanford.edu/service/secureafs">Secure AFS</a>, <a href="https://uit.stanford.edu/service/storage/securefile">Secure File Storage</a>, <a href="https://uit.stanford.edu/storage/wasabi-cloud-storage">Wasabi Cloud Storage</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">File Transfer: <a href="https://globus.stanford.edu/">Globus</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row"><a href="https://uit.stanford.edu/service/phone/softphone">Cardinal Voice Softphone</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Slack Messaging: <a href="https://uit.stanford.edu/service/slack">Public Channels</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Slack Messaging: <a href="https://uit.stanford.edu/service/slack">Direct Messages and invite-only channels</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Issue Tracking: <a href="https://uit.stanford.edu/service/jira">JIRA</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Network Access Control: <a href="https://uit.stanford.edu/service/sunac">SUNAC</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Research Computing Clusters: <a href="https://srcc.stanford.edu/sherlock-high-performance-computing-cluster">Sherlock</a> and <a href="https://login.scg.stanford.edu/">SCG</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Research Computing Clusters: <a href="http://med.stanford.edu/nero/why-nero.html">Nero</a> and <a href="https://carinadocs.sites.stanford.edu/">Carina</a><br /> <small><strong>IMPORTANT:</strong> A DRA review is required to introduce new research datasets.</small></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Research Computing Storage: <a href="https://oak-storage.stanford.edu/">Oak</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Research Dataset Collaboration: <a href="https://redivis.stanford.edu/">Redivis</a><br /> <small><strong>IMPORTANT:</strong> A DRA review is required to introduce new research datasets.</small></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row"><a href="https://uit.stanford.edu/service-management/servicenow">ServiceNow</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row"><a href="https://uit.stanford.edu/service/sharedcomputing">Shared Computing: FarmShare</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for high risk data</span></td> <td><span class="element-invisible">Not approved for high risk data</span></td> </tr> <tr> <th scope="row"><a href="https://uit.stanford.edu/service/smartsheet">Smartsheet: Collaboration and Project Management</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row"><a href="https://profiles.stanford.edu">Stanford Profiles: CAP</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td><span class="element-invisible">Not approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Survey Tool: <a href="https://uit.stanford.edu/service/survey">Qualtrics - University, SoM, and GSB instances</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Survey Tool: <a href="https://uit.stanford.edu/service/survey">Qualtrics - All other instances</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row"><a href="https://uit.stanford.edu/service/voicemessaging">Voice Messaging</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row"><a href="https://uit.stanford.edu/service/vpn">VPN</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td class="high-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for general high risk data</span></td> <td class="high-risk-phi"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for PHI data</span></td> </tr> <tr> <th scope="row">Web Programming: <a href="https://uit.stanford.edu/service/cgi">CGI</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> <tr> <th scope="row">Wiki: <a href="https://uit.stanford.edu/service/Confluence">Confluence</a></th> <td class="low-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for low risk data</span></td> <td class="moderate-risk"><i class="fa fa-check" aria-hidden="true"></i><span class="element-invisible">Approved for moderate risk data</span></td> <td><span class="element-invisible">Not approved for general high risk data</span></td> <td><span class="element-invisible">Not approved for PHI data</span></td> </tr> </tbody> </table> <p class="center"><a href="#main-content"><i class="fa fa-chevron-circle-up" aria-hidden="true"></i> Back to top</a></p> <div class="section-link"></div> </div> </section> </div> </div> </div> </div> </div></div>  </div> </div> <div id="push"></div>  </div>  <div id="footer" class="clearfix footer"> <div class="container"> <div id="footer-content" class="row-fluid footer-content"> <div class="region region-footer clearfix"> <div id="block-menu-menu-footer-services" class="clearfix block block-menu span3"> <h2>Services</h2> <div class="content"> <ul class="menu nav"><li class="first leaf"><a href="/services">Explore all services</a></li> <li class="leaf"><a href="/cloudsolutions-q-a" class="menu-node-unpublished menu-node-unpublished">Cloud Solutions Q&As </a></li> <li class="leaf"><a href="/guide/tools">Get started with IT</a></li> <li class="leaf"><a href="/guide/security">Practice secure computing</a></li> <li class="leaf"><a href="/guide/telecommuting">Work Anywhere Guide</a></li> <li class="last leaf"><a href="/guide/perks">IT perks</a></li> </ul> </div> </div> <div id="block-menu-menu-support" class="clearfix block block-menu span3"> <h2>Support</h2> <div class="content"> <ul class="menu nav"><li class="first leaf"><a href="https://stanford.service-now.com/it_services?id=kb_home">Find answers</a></li> <li class="leaf"><a href="https://stanford.service-now.com/it_services?id=sc_home">Request something</a></li> <li class="leaf"><a href="https://stanford.service-now.com/services?id=get_help">Get help</a></li> <li class="leaf"><a href="/status-metrics">View system and project status</a></li> <li class="leaf"><a href="/guide/browser-recommendations">Browser recommendations</a></li> <li class="last leaf"><a href="http://techsource.stanford.edu/">Tech Resources & Support (for students)</a></li> </ul> </div> </div> <div id="block-menu-menu-university-it" class="clearfix block block-menu span3"> <h2>University IT</h2> <div class="content"> <ul class="menu nav"><li class="first leaf"><a href="/organization/structure">About us</a></li> <li class="leaf"><a href="/organization/orgchart">Organization chart</a></li> <li class="leaf"><a href="https://careersearch.stanford.edu/page/uit-jobs-at-stanford-23">Current job openings</a></li> <li class="last leaf"><a href="/annual-report">UIT Annual Report</a></li> </ul> </div> </div> <div id="block-menu-menu-news" class="clearfix block block-menu span3"> <h2>Connect</h2> <div class="content"> <ul class="menu nav"><li class="first leaf"><a href="/news">News</a></li> <li class="leaf"><a href="/events">Events</a></li> <li class="leaf"><a href="https://cop.stanford.edu/">Communities of Practice</a></li> <li class="last leaf"><a href="https://uitcommunity.stanford.edu/">UIT Community (UIT staff only)</a></li> </ul> </div> </div> <div id="block-stanford-saml-block-stanford-saml-block-login-block" class="clearfix block block-stanford-saml-block span3"> <h2>UIT Web Editors</h2> <div class="content"> <a href="/sso/login?destination=node/24632" rel="nofollow">Login</a> </div> </div> </div>  </div> </div> </div>  <div id="global-footer" role="contentinfo"> <div class="container"> <div class="row"> <div id="bottom-logo" class="span2"><a href="https://www.stanford.edu"><img src="/sites/all/themes/stanford_uit/images/footer-stanford-logo@2x.png" alt="Stanford University"></a></div> <div id="bottom-menu" class="span10"> <ul id="global-links"> <li><a href="https://www.stanford.edu">Stanford Home</a></li> <li><a href="https://visit.stanford.edu/plan/">Maps & Directions</a></li> <li><a href="https://www.stanford.edu/search/">Search Stanford</a></li> <li><a href="https://emergency.stanford.edu">Emergency Info</a></li> </ul> <ul id="global-policy-links"> <li><a href="https://www.stanford.edu/site/terms/" title="Terms of use for sites">Terms of Use</a></li> <li><a href="https://www.stanford.edu/site/privacy/" title="Privacy and cookie policy">Privacy</a></li> <li><a href="https://uit.stanford.edu/security/copyright-infringement" title="Report alleged copyright infringement">Copyright</a></li> <li><a href="https://adminguide.stanford.edu/chapter-1/subchapter-5/policy-1-5-4" title="Ownership and use of Stanford trademarks and images">Trademark</a></li> <li><a href="http://exploredegrees.stanford.edu/nonacademicregulations/nondiscrimination/" title="Non-discrimination policy">Non-Discrimination</a></li> <li><a href="https://www.stanford.edu/site/accessibility" title="Report web accessibility issues">Accessibility</a></li> </ul> </div> <div id="copyright" class="span10 offset2"> <p class="vcard"><span aria-hidden="true">©</span> <span class="sr-only-text">Copyright</span> <span class="fn org">Stanford University</span>. <span class="adr"><span class="locality">Stanford</span>, <span class="region">California</span> <span class="postal-code">94305</span>.</span> </p> </div> </div> </div> </div>   <script type="text/javascript" src="https://uit.stanford.edu/sites/default/files/js/js_ayLNthpYLmDu8KfjP52Q2z7dtJvBYA40FqhVhVi0yKQ.js"></script> </body> </html>