Data security

It is important to understand the risks to your research data. You will need to mitigate against these when working in the office, at home or abroad. This includes when collaborating with others. 

UIS have some information on:  

• Security  

• Data Security for researchers   

Please see our advice on Secure and collaborative working.

Data Security Classifications   

The University of Cambridge defines 4 security levels for classifying data. These centre around the potential impact a data breach would have. The data owner decides the data security classification. To do this, you can complete either:  

• 3-minute Research Data Impact Assessment   

• Information Security Risk Assessment (ISRA)  

The ISRA Impact Table provides guidance on where you can store your data. 

UIS provides guidance on How to classify and store your data.  

Cyber security awareness  

We all have a responsibility to ensure cyber security. Annual cyber security training is mandatory for: 

• all University and College staff 

• all students 

• and anyone else who uses University information services. 

This is stated in the University's Information Services Acceptable Use Policy.  

How to report an IT security incident  

Please tell someone as soon as possible if you think you have: 

• fallen for a scam 

• downloaded or clicked something you shouldn’t have. 

Here are some useful links: 

• Report an IT security incident   

• Report a Personal Data Breach