On-site storage refers directly to CSI stored within any University facility.

 

1.	Employees Personal Belongings

The University will provide all personnel with a secure place to store personal belongings. Employees are responsible for keeping personal items secure during work hours.

 

2.	CSI Stored in a Workspace

Confidential and Sensitive Information stored in an office, cubicle, reception area, cash register, or other workspace must be kept in locked desks, cabinets, closets, or lockers when not in use.

 

3.	File Rooms and Storage Rooms

File and storage room doors must be closed and locked when unattended by authorized personnel.

 

4.	Records Storage

Company, customer, transaction, and service provider records will only be stored when there is a legitimate business need. Any records in storage beyond the legal statute of limitations will be appropriately disposed of by designated employees.

 

Off-site storage refers to any place CSI is stored outside of designated University facilities.

 

1.	Approved Storage Facilities

CSI may only be stored in facilities authorized by University Administration.

 

2.	Storage Service Providers

All storage service providers must comply with the service provider oversight policies in this Identity Theft Prevention Policy.