Security Incident
Report Problem
VPN
Login to vpn@ucsf
Help
email usEncryption
Encryption is the process of transforming plain text information to make it unreadable to unauthorized parties. A key or password is required to read encrypted data. Encryption can be used to protect data stored on drives or other media in case of loss or theft.
As stated in the minimum security standards in Campus Administrative Policy 650-15, departments are required to encrypt restricted data that resides on mobile devices or is transmitted over public networks.
While campus units have been encouraged to eliminate unnecessary electronic storage of sensitive personal information, the need to protect sensitive data necessary to conduct university business remains.
In an effort to mitigate the burden of notification associated with lost or stolen data and prevent unauthorized access to restricted information, Enterprise Information Security now offers Pointsec encryption software for campus desktops and laptops. Pointsec provides whole disk encryption for Windows computers for data at rest.
The Pointsec page offers information on consultation, installation, licenses, support, and recharging.
For encrypting data that is transmitted over public networks, refer to the PGP or Secure Email Overview pages.
OAAIS offers additional encryption solutions for transmitted data as well as all types of storage devices and mobile devices. Refer to the Encryption Solutions page for detailed information.
Encryption, like all other security solutions, is just one component of a layered defense.