Ask the Auditor!

If we didn't have controls, what could happen?

Unauthorized access to highly sensitive data can compromise the confidentiality of student records, salary information, and strategic Boston College financial records.  For instance, incorrect information can result in inaccurate financial statements.

Here are a few things that can result from inadequate protection of sensitive or confidential data:

  • malicious damage to data files
  • deliberate manipulation of application programs
  • reprocessing effort due to lost data costing time and money
  • misuse of output (i.e., selling information, etc.)

 

Are there legal reasons for protecting my information?

There are federal and state laws that make Boston College legally responsible to ensure information is correct and used appropriately. The laws:

  • protect a person's right to privacy
  • prohibit violations of copyright infringements
  • protect student records from unauthorized access

How can I protect my sensitive information?

The same principle of locking the door to your office applies to your computer. Lock up your sensitive information by:

  • using password software
  • choosing a hard-to-guess password
  • changing your password periodically
  • never posting your password/pin number near your terminal
  • keeping your password and pin number confidential
  • disposing your confidential material in a responsible manner