Body
PSQ Instructions
Any request for software or services that includes Terms, Conditions, or Privacy and Security policies requires an up-to-date, completed PSQ form. Please visit the vendor's website and review their Terms of Service and Privacy Policies, and then answer the questions on the PSQ form.
The purpose of the form is to disclose any confidential or protected data that may potentially be handled or exposed by the software or service that is being requested. If no sensitive data elements are being shared, accessed, or otherwise handled, please answer accordingly. Also, please make sure to select the "I agree" box after the acknowledgement statement and fill out the contact info completely.
What data is confidential?
Use of the following types of data requires extra sensitivity due to the significant potential for misuse and costly reporting requirements in the event of unauthorized access. If your work involves handling any of these types of data, you must receive special training in the protection of electronic information. In addition, any systems that process this data must employ additional security measures.
Types of confidential information:
- Social Security Number, Driver's License Number, Tax ID, Credit Card Number, Bank Account Number, Patient ID
- Student, medical, and financial records
- Grade information
- Computer passwords
Data handling expectations:
Whenever you store or share Confidential information, the data must be adequately protected to ensure confidentiality and integrity.
Confidential and Internal examples:
- Must be protected to prevent loss, theft, unauthorized access, or disclosure
- Must be stored in a closed container (i.e., file cabinet, closed office, etc.) when not in use
- Must not be posted on any public-facing website
Additional note about Cloud Services:
To avoid having a request rejected, it is recommended to use well-known and reputable vendors. Please be sure to understand the vendor's terms of service and privacy policies.
Virtually all cloud services require users to accept their terms of service and privacy policies when creating new accounts. These agreements do not allow users to negotiate terms, do not provide the opportunity to clarify terms, often offer vague descriptions of safeguards to user data or services, and frequently change without notice.
Risks with using self-provisioned cloud services include:
- Unclear and potentially poor access control or general security provisions
- Sudden loss of service without notification
- Sudden loss of data without notification
- Data stored, processed, or shared in the cloud is often accessible to third parties, which may compromise people’s privacy.
- The exclusive intellectual property rights to data stored, processed, or shared on a cloud service may be compromised.