All data and information resources of the SEHD are subject to University of Colorado's IT Security Program policy, APS-6005. The policy has a section related to IT Resource Security Management. Topics include:

1. System and application security management.
2. Malicious activity protection.
3. Data backup and recovery.
4. Media handling and storage.
5. Disposal of electronic equipment and media.

The most secure SEHD data are subject to the UCD Device and Media Controls HIPPA policy. The policy states the goal of the policy is to

govern the receipt, removal, and disposal of hardware and electronic media used for storage of ePHI at UCD, and the movement of these items within or out of a UCD facility.