As members of the University Community and the School of Public Health, faculty and staff are obligated to abide by the guidelines and policies of the University. Below are links to those that are IT-related. (You are encouraged to review these periodically for updates, as policies change frequently.)
Medical Center Data Security Policies & Guidelines
Data Security & Me
What do I do if I have data that needs to be protected?
Email Elizabeth Tashiro at es2222 [at] columbia.edu
Where can I learn more about data security?
What Training Is Required?
CUIMC's Offices of HIPAA Compliance and Information Security team up to provide HIPAA training and security essentials annually. This is REQUIRED training for anyone doing work at CUIMC, with sanctions for noncompliers. Learn more.
Principle of Least Privilege
School data security guidelines and practices are based on the Principle of Least Privilege. The principle states:
That an individual, program or system process is not granted any more access privileges than are necessary to perform the task.
What Are We Worried About
Data Classification Policy
Protection of data is required by acts, laws, regulations, Columbia University policy or contract
Columbia University has an obligation to protect the data
No regulatory requirement
• Credit card numbers
• Financial transactions which do not include
• Publicly posted press releases
Considerations Prior to a Server Purchase
What do I have to think about before I purchase a server to support my project?
Before making any server purchase at the Mailman School, contact es2222 [at] mail.cumc.columbia.edu (Elizabeth Tashiro). There are policies that govern data system creation and management that you must know before you decide to commit funds. For example:
1. All data systems must have a designated system custodian/system administrator who has completed the School training requirement;
2. All data systems must be certified annually by the Office of IT Security at CUMC;
3. All data systems must be housed in an IT approved facility.
Elizabeth will help you navigate the process by informing you of relevant policies, getting you to the right people, and providing useful resources. You can get started yourself by checking out CUIMC's System Registration pages. She can be reached at (212) 342-3021 or es2222 [at] mail.cumc.columbia.edu.