====== Device and Media Control ======

===== Applicable University of Colorado Denver Policies =====

==== University of Colorado IT Security Program Policy ====

All data and information resources of the SEHD are subject to University of Colorado's IT Security Program policy, [[https://www.cu.edu/ope/aps/6005|APS-6005]]. The policy has a section related to IT Resource Security Management. Topics include:

  - System and application security management.
  - Malicious activity protection.
  - Data backup and recovery.
  - Media handling and storage.
  - Disposal of electronic equipment and media.

==== University of Colorado Denver HIPPA Policy ====

The most secure SEHD data are subject to the [[http://www.ucdenver.edu/research/Research Administration Documents/9.10 Device and Media Controls.pdf|UCD Device and Media Controls HIPPA policy]]. The policy states the goal of the policy is to

> govern the receipt, removal, and disposal of hardware and electronic media used for storage of ePHI at UCD, and the movement of these items within or out of a UCD facility.