The University of Texas at San Antonio
Office of Information Technology
Office of Information Security (OIS) Standards
OIS 10 – Standard for Data Encryption
I. STANDARD STATEMENT
Data encryption is a process of securing computer files by instituting safeguards that make the files unreadable to everyone except for the holder of the encryption key. Data encryption is required on all laptops owned by UTSA.
This standard supports HOP Policy 8-12 Information Resources Use and Security Policy
This standard applies to all UTSA faculty, staff, and students.
If you have any questions about OIS 10 – Standard for Data Encryption contact the following office:
The Office of Information Security
1. Encrypting UTSA-owned Desktops?
2. Encrypting UTSA Laptop Computers and Other Mobile Devices.
3. What is "Sensitive Data"?
The UTSA Office of Information Security has developed the Data Classification Standard to help you determine the sensitivity of your data. While whole disk encryption is required for all laptops, encryption and passwords are recommended for all portable devices to ensure your data is secure.
4. Encryption for Personally-owned Computers
A personal owned computer must be encrypted if it contains any of the following types of University information.
5. "University information" means all recorded information created or received by or on behalf of the University (or System) that documents activities in the conduct of state business or the use of public resources. This includes all information generated by a University employee in the course of performing his or her duties regardless of whether it was created and/or located on a personal device owned by the employee.
6. Now Available: Encrypted Portable Devices
There may be occasions when you need to transport sensitive data. Because of the risk of exposure, this data must be encrypted. The UTSA Office of Information Security distributes encrypted flash drives for faculty and staff members who need a secure way to transport sensitive data. Find out more on the Encryption for Portable Devices page.
Effective Date: January 1, 2014
Last Revised: March 16, 2016