A requirement of university data security policy is that each department identify the location and amount of sensitive data stored on university-owned servers, desktops, and laptops. There is a lot of boilerplate in the language used for this policy, but in direct terms, we are talking about social security, BuckID, and credit card numbers. Chemistry and Biochemistry users have no need to store any of this information, other than for personal records. If you remember, up until about 2006, the Registrar emailed rosters with social security numbers in them. I suspect that these old roster files are the main problem for us in this department.
CBC Computer Support will begin scanning server file systems for sensitive data starting today. We do not expect this scanning to impact users. However, we will be generating reports of these scans, and we will be sharing these reports with you in an effort to remove sensitive data from our systems.