Information Technology (IT) has developed a new policy on accessing and using Banner data.

The new policy recognizes the need for institutional data to be shared in a timely, efficient and secure manner, while acknowledging the need to protect the confidentiality of the data. The policy will be reviewed annually and revised as necessary.

Policy provisions include:

• Banner data is the property of Metro State and to be used only by authorized personnel for official college business only, not for personal gain or curiosity.
• Anyone using Banner data—in print or electronic form—must uphold its confidentiality and take reasonable measures to protect it from theft or unauthorized or accidental viewing while in use, transit or storage. In the event the data is compromised, IT must be notified immediately.
• Anyone in the service of the college may be authorized to access the Banner data necessary to perform his or her duties.
• Supervisors should notify IT and Human Resources immediately when an individual leaves the college or begins an extended absence.
• Banner module owners—the person responsible for the administrative oversight of a specific Banner system such as student, finance or financial aid—are ultimately responsible for the data within said system. Banner module owners have the sole authority to authorize access to the data within the modules they administer and are encouraged to use the principle of least privilege when authorizing access.

Any suspected violation of these policies should be reported to IT's security and disaster recovery coordinator at www.mscd.edu/~infotech/security/ or 303-556-8325.

Note that these are excerpts of the policy. Until the full policy is posted on the Web, please call Ramona Morris, 303-556-2441, for a copy.