| Q1. Is it considered secure to email a spreadsheet attachment if its password protected? |
| A1. The answer is No, per ITaP Security. An attachment must be encrypted to be considered secure to email sensitive information. |
| |
| Q2. Is it considered secure to have a shortcut on the desktop that points to a file on the network if the file contains sensitive information? |
| A2. The answer is No, per ITaP Security. SSTA suggests placing shortcuts in your home directory (H:) so they are better secured on the network. |
| |
| Q3. Is it okay to send SIDs through campus mail on CD/disk? |
| A3. The answer is No, per Rob Stanfield - ITaP's Interim Director of the new Identity and Access Management Office. "There's too much risk in it getting lost or stolen. Assuming this is for data transfer, I'd suggest you have it hand-delivered to the recipient or to an assistant on their behalf and the media destroyed once the transfer is complete." |
| |
| Q4. Is it okay to send a CD with SIDs to a third party through a delivery service such as FedEx? |
| A4. The answer is No, unless . . . per Rob Stanfield. An exception is allowed if the contents of the CD are encrypted prior to shipping. |
| |
| Q5. How do I find out what my PUID is? |
| A5. Your PUID is printed on the Purdue University ID Card and is contained on the magnetic strip on your card. You can all look up your PUID by accessing your Purdue University directory information at http://www.itap.purdue.edu/directory/. Choose the option that allows you to "Edit Personal Directory Entry." You will need to log in with your Career Account information in order to view your detailed directory information. Your PUID is listed near the bottom of the directory information. Students can also look up their PUID on SSINFO. Beginning October 2005 all new employees will receive a letter containing their PUID shortly after they begin employment with Purdue University. Current Purdue employees received a letter in October 2005 containing this same information. |
| |
| Q6. Is PUID considered restricted or sensitive? |
| A6. The intent of PUID is to make it a number that has no value outside of Purdue University. However, there are certain privileges that are associated with your PUID, and although the number isn't considered restricted, it IS considered to be sensitive information. The PUID, when associated with other authentication credentials, could grant access to the student record information, so it is important that it be considered as sensitive data and that it not be displayed in a public manner. As a result, the data handling rules for sensitive data apply in this case. |
| |
| Q7. Can PUID be used for posting grades? |
A7. No, it can not. Posting of grades with any information that could result in the student being personally identified is not permitted. Please refer to the following:
http://www.purdue.edu/securepurdue/puid/faq.cfm |
| |
| Q8. Can PUID be displayed on mailing labels? |
| A8. No. Again, the PUID, when associated with other authentication credentials, could grant access to the student's confidential information, so it is important that it be considered as sensitive data and that it not be displayed in a public manner. As a result, the data handling rules for sensitive data apply in this case. |
