Kellogg Encryption Policy


Overview

Purpose

To reduce the risk of Kellogg having sensitive data compromised by theft or loss of equipment, Kellogg Information Systems (KIS) will encrypt all computer hard drives. Data on an encrypted drives cannot be retrieved even if the drive is removed and accessed externally. Please see the Northwestern Full Disk Encryption security policy for more information.
 
If an unencrypted laptop is lost, all data on it is considered compromised. Kellogg needs to identify any personally identifiable information, contractually restricted or sensitive information, and take action to notify all those affected. If an encrypted laptop is lost, the data is safe.
 
The Encryption Policy goal is all encrypt all drives present in Kellogg-owned personal computers. 

Policy

  1. All Kellogg personal computers should have their drives encrypted:
    • Staff participation is mandatory.
    • Faculty participation is highly recommended.
  2. Encryption keys:
    • Are given to the customer, along with instructions not to print the key or put it in the same location as the computer (ig laptop bag as the laptop).
    • Kept securely by KIS to enable data recovery in the event it is needed.
  3. Encryption is being phased in:
    • September 1, 2017, all newly purchased staff laptops will be encrypted as part of the standard setup. 
    • October 1 2017, KIS will work with administrative departments to encrypt existing laptops.
    • October 1, 2017, faculty wishing their existing laptops to be encrypted can contact KIS to schedule this service.
    • August, 2018, this policy is being extended from laptops to all personal computers.
    • October 29, 2017, KIS will work with Departmental Managers to reach out to faculty to encrypt their computers.
  4. KIS will assist any staff or faculty member with encryption issues during business hours.

Frequently Asked Questions

Q: Will I notice an difference on my laptop?
A: Disk encryption on a modern laptop is mostly imperceptible.

Q: What if I lose the encryption key?
A: KIS will provide you with two copies of the key. One will be printed and one will be emailed to you. Please do not keep the printed copy of the key along with the laptop in a case. KIS also advises you save the key as a note on your phone in case you do not have access to the printed copy or your email.

Q: Will KIS assist me if I run into problems with encryption?
A: Yes. Please call us as soon as possible if you have any issues with you encrypted device. Please visit your nearest KIS support office for assistance if you are not able to reach KIS by phone.