Security part of Laboratory’s Goals and Commitments
Two of the Laboratory’s new Goals and Commitments relate to the importance of security, and one key part of cyber security is the protection of Personally Identifiable Information (PII).
PII can be used to compromise an individual’s identity, so it is important to protect this information. Personally Identifiable Information includes Social Security numbers, medical information, criminal history, financial information, and performance reviews.
Computers that are located on Laboratory property are protected through means such as passwords and firewalls. However, laptops and computers that are transported off-site are vulnerable, and any PII which is present must be encrypted with software such as Entrust or FileVault, said Mark Owens, Chief Information Officer.
He said that PII data must be encrypted if being sent electronically to someone outside of the Lab. These requirements apply to PII of government, contractor, and subcontractor employees and must be adhered to by both Laboratory employees and subcontractor personnel. Owens added that the loss of PII constitutes a reportable incident.
To view the Department of Energy Working Example of PII, click here. Employees must report the potential loss of PII within thirty-five minutes of the suspected loss to the Chief Information Office at 7-0961.
Entrust is available through Electronic Software (ESD). Employees who need Entrust on their computers should contact the Departmental Computing Help Desk at 7-4357 for more information. Employees also can email questions about Entrust to entrust-help@lanl.gov or contact their Organizational Computer Security Representative (OCSR).
For more information about PII, visit the Cyber Security’s Personally Identifiable Information Web site or write to pii-help@lanl.gov.
Powerful Light Pulses Imitate Stars, Make Fusion Reactions Clearer
Milagro Telescope Zooms in on New Regions of Space
Library Researchers Make Searching More Predictable
