Data Security Contact Responsibilities

Data Security Contacts are required to perform the following tasks:

  • Periodically examine all reports produced for their organization in the online security request system (with frequency determined by the number of users in the DSC's organization), and audit requirements.
  • Periodically examine the online security request system to ensure outstanding security requests are serviced promptly.
  • Retain supervisors' requests/approvals (either paper signatures or e-mail) for security access.
  • Periodically examine same-organization DSC activity (for those organizations which have been empowered to grant access to resources they own).
  • Periodically review the continued need for access to resources controlled by the DSC's organization.
  • Proactively maintain proper userid access for users in the DSC's organization:
    1. Immediately suspend the userid upon employee termination, and request deletion of the userid.
    2. Retrieve any needed information within ten working days, and request deletion of the userid.
    3. Immediately adjust the employee's security access when there is a change in job responsibilities or any other employment status change that would result in a change of security access needs.
  • Notify DSA of any incorrect information or observed risks to the security of University operations.
  • Notify users of the proper password format to be used.
  • Ensure that all users are aware of their responsibilities regarding security policies and procedures at the University of Virginia.

Realize that these tasks may change; therefore, all security personnel should review them monthly. Please contact the Data Security Administrators if you have questions or concerns regarding these duties.

© 2008 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.