Child pages
  • Lehigh University Services Guide for Data Storage, Processing, and Transmission
Skip to end of metadata
Go to start of metadata

NOTE: If you have any questions about proper handling of data, please contact Information Security



Electronic Devices and
Lehigh Hosted or Contracted Services

Confidential Information

Public

Class I
Critical
Class II
Restricted 
Class III
Institutional/
Proprietary 
Class IV
Public/
Unrestricted 
Lehigh Owned - LTS-Managed Whole Disk Encrypted Devices
including, but not limited to:
    • Computers
    • Network-Attached Storage (NAS)
    • Externally Connected Storage Devices



(error)

 



(tick)


(tick)


(tick)
Personally Owned Computers or Storage Devices
(error)(error)(error)(tick)
Unmanaged Mobile Devices (Lehigh Owned or Personal)
(error)(error)(error)(tick)
Lehigh University LAN Drive (H: I: J: Drives)
(error)(tick)(tick)(tick)
Approved Access-Controlled LAN Drive Storage*
(tick)(tick)(tick)(tick)
Web and Storage Space
(error)(error)(tick)(tick)
Ceph Storage with LTS Access-Control (R Drive)
(error)(tick)(tick)(tick)
Confluence
(error)(error)(tick)(tick)
Course Site
(error)(tick)(tick)(tick)
Drupal and Lehigh Hosted Webpages
(error)(error)(tick)(tick)
Email - Lehigh Gmail
(error)(error)(tick)

(tick)

Email - Lehigh Hosted
(error)(error)(tick)(tick)
Lehigh File Sender
(tick)(tick)(tick)(tick)
Lehigh Google Drive** (encrypted in transit and at rest)
NOTE: Google stores data on servers located domestically and abroad.
(error)(warning)(tick)(tick)
Lehigh Dropbox for Business** (encrypted in transit and at rest)
NOTE: All data is stored in the US.
(error)(warning)(tick)(tick)
Personal Dropbox
(error)(error)(error)(tick)
Lehigh Microsoft OneDrive** (encrypted in transit and at rest)
(error)(warning)(tick)(tick)
Qualtrics
(error)(tick)(tick)(tick)

(tick) Acceptable  (error) Not Acceptable (warning) Some exclusions (noted below)

*Must be approved by Information Security

** ITAR and Export controlled information under U.S.laws are excluded. Although ITAR and Export controlled information under U.S. laws are classified as Type II data, it cannot be stored on systems outside the US.  In addition to storage restrictions on this type of data there are also restrictions on sharing such data with foreign nationals of restricted countries. It is up to the data owner to determine whether any export controlled data may be shared with someone or transported to a particular country. Guidance can be found at the US Department of Commerce Control List site at: http://www.bis.doc.gov/index.php/regulations/commerce-control-list-ccl

  • No labels