To members of the Shippensburg University Community,
This email is an annual notification to the Shippensburg University Community regarding the 2020-21 Information Security Plan. The plan can be found on the myShip portal under Employee – Services and Policies – Information Security Plan.
Information Security Plan
As an institution of higher education, Shippensburg University has a responsibility to its students and employees to safeguard certain types of confidential information. The protection and handling of this information is outlined in various legislative acts, such as: the Family Educational Rights and Privacy Act (FERPA), which affords students certain rights with regard to their educational records, the Health Insurance Portability and Accountability Act (HIPAA), which provides guidance in maintaining the privacy of protected health information and the Gramm-Leach Bliley Act which regulates the disclosure and handling of financially related information.
Coordination of the university’s commitment to these acts is provided through the campus’ Information Security Plan. This plan monitors the campus community to insure the security and confidentiality of customer information, to protect against any anticipated threats or hazards to the security or integrity of such information, and to protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer.
It is the responsibility of any employee who has access to restricted, confidential or sensitive data to access, use, discuss, release and/or divulge only the data that is needed to perform the job. Release of this information will only be done through authorized protocols. For university employees, breaches in confidentiality of such data may result in disciplinary action up to and including separation from employment. Such breaches also may result in criminal action if it is determined that any local, state, or federal law has been violated.
For more information, university information security policies are available on the myShip portal under Employee – Services and Policies – Information Security Policies.
All questions and replies may be directed to Dr. Amy Diehl, Associate Vice President & Chief Information Technology Officer at firstname.lastname@example.org.