IT Security
Security and Compliance
We provide several services to keep your information and the university's data safe. Services provided include monitoring, protecting and securing our information technology infrastructure, data and operations to safeguard the privacy of the university community while maintaining compliance with applicable policies, laws and regulations.
Report a Lost or Stolen Device
If a university owned and issued electronic device has been lost or stolen, click here to learn how to report the missing item to OIT and Campus Police.
Security Guides and Policies
Unit HIPAA Compliance Program
The Unit HIPAA Compliance Program provides guidance to units/departments, schools, offices and other campus units on the Anschutz Medical Campus, and to a lesser extent CU Denver campus, in their responsibilities to meet compliance to the HIPAA Security Rule. Visit the site for resources to ensure all data users are HIPAA compliant.
Security Tools and Services
Search all tools and services using the search bar.
Software and Applications Assessment
Category: IT Security OIT - Categories Software Audience: Faculty Researchers StaffThird party vendors are now subject to the same Security Rule requirements as Covered Entities, and are also subject to relevant sections of the Privacy Rule and the HITECH Breach Notification Rule. In order to protect university confidential and highly confidential data, including PHI, the risk and compliance team assesses the security and practices of all third party vendor server applications and cloud services. Third party vendor applications include those that process, transmit or store PCI (Payment Card Industry) data.
Third party vendors must:
- Prevent the loss, theft, unauthorized access and/or disclosure of university data
- Destroy data when no longer needed per university data owner instructions
- Have incident response procedures and reporting requirements in case of a breach
Need an Assessment
Learn more about the assessment process. Reach out to the Risk and Compliance (RAC) team to determine if an application is approved for use.