Information Security and IT Compliance News

Navigating Approved and Restricted Applications at the University

Feb 18, 2025

info graphic with an image of a hand holding a open digital file and another image with a digital file that is locked.

The university has compiled a comprehensive list of applications and tools integral to our teaching and research endeavors. These applications and tools have been thoroughly reviewed for security vulnerabilities and classified based on the sensitivity level of the data they handle. To ensure the security and privacy of university data, it is crucial to use only approved applications and tools or submit a Technology Risk Assessment request for tools you or your department want to use to ensure the tool is reviewed and meets university security standards.

The ISIC website provides an overview of both the approved applications for university use and those that are restricted from use. Approved applications meet the university's stringent privacy and data security requirements, ensuring that data is protected. To learn more about the security requirements for using these approved applications and how to request the technology, click on an approved application to find detailed information about the tool, how to access it, and the security requirements for using with university data, ranging from university public to highly confidential information.

Unapproved applications are those that were reviewed and do not meet the university's privacy and data security requirements. Using these applications can pose significant risks to the security of university data, and their use is prohibited for university purposes. Where possible, alternative solutions for approved tools and applications are provided. Registered research studies that are facilitated by other universities must provide attestation that the application meets enterprise data security, privacy, and regulatory compliance requirements. DropBox may only be used with explicit approval after a consultation with Risk and Compliance. Amazon Web Services may only be used with explicit approval after a consultation with Enterprise Research Computing and Risk and Compliance. Please contact the Risk and Compliance (RAC) team for more information.

Additional detail will be added to the site as more technology is approved, including guidelines on selecting the right hardware and software for your needs, ensuring compatibility with university systems, and making informed decisions.

You can also visit the Artificial Intelligence (AI) webpages for more specific information about AI use at the university.