The IT Security Office, in conjunction with the IT Security Council, has developed requirements for securing university systems and data. These requirements are mandated in Policy 5.10, Information Security.

The IT Security Council will review and, as needed, revise the requirements on an annual basis. Send comments or questions to: itsecurity@cornell.edu

Additional material

For more information about what employees must do to safeguard confidential data in the course of their work at Cornell, see:

• Secure computer and mobile devices
• Consequences of mishandling sensitive data