All data and information resources of the SEHD are subject to University of Colorado's IT Security Program policy, APS-6005. The policy states:
University data centers and IT resourcesshall be sufficiently protected from physical and environmental threats to prevent the loss, damage, or compromise of assets, and interruption to business activities.
Examples of safeguards include:
The most secure SEHD data are subject to the UCD Facility and Device Security HIPPA policy. The policy states
It is the responsibility of UCD Directors of Electronic Security, Information Systems, Facility Operations, Human Resources, and all affected unit managers and supervisors to limit physical access to their electronic information systems and the facilities in which they are housed, while ensuring that properly authorized access is not delayed.