Policy Changes – Summary – September 15 deadline

- ALL laptops used to connect to HCI / U of U, or to perform HCI / U of U Health Sciences work need to have full disk encryption.  This includes both organization owned laptops and personally owned systems.

- CATG needs to manually verify encryption and collect inventory on these systems

- CATG will be providing new, encrypted USB "thumb drives"

- After September, all non-HCI provided thumb drives will be disallowed on the HCI premises.

- All external storage devices on the HCI premises need to be encrypted.

- Any home-based external storage used to backup laptops used to connect to or perform work at HCI / UUHSC need to be encrytped

- Employees, Faculty & Students doing HCI work will need to complete online HIPAA training and attest that they are in compliance with requirements