Storage guide
What data can be stored where?
Main content
All information you process and share has different needs for security and protection, depending on how valuable or confidential it is. At UiB, we classify information into four categories that are also displayed with colors:
- Open (green) is used for information that can be available for everyone. Examples: A web page, study materials, published research data, e-mails or letters.
- Limited (yellow) is used for information that can be available for both external and internal recipients, but requires authentication. Examples: Work documents, student papers, research data and -reports without sensitive personal data, e-mails with internal information.
- Confidential (red) is used for information that can be available, but requiring strict control of access. Examples: Some strategy documents, sensitive personal data, health information, exams not yet given, research data and -reports containing sensitive personal information.
- Strictly confidential (black) is used for information that requires very strict control of access. Examples: Information about persons living on secret address or otherqise requiring special protection, very confidential research data and -reports.
Read more about the four categories in the Management System for Information Security and Privacy (only available in Norwegian).
Information must be stored in accordance with this guide, so that we ensure the necessary protection of UiB's information. Some systems or services have special prerequisites attached to them, marked with a footnote in the tables.
Physical storage media
OPEN | LIMITED | CONFIDENTIAL | STRIGHTLY CONFIDENTIAL | |
|---|---|---|---|---|
| Storage on your own PC/Mac (both UiB and private computers) | OK | Prerequisites1a | Prerequisites1a | NO |
| Minnepinne eller ekstern harddisk | OK | Prerequisites1b | Prerequisites1b | NO |
Storage services
OPEN | LIMITED | CONFIDENTIAL | STRIGHTLY CONFIDENTIAL | |
|---|---|---|---|---|
| Billy (long time storage) | OK | OK | Prerequisites1 | NO |
| Common area/directory | OK | OK | Prerequisites1 | NO |
| Home directory (Windows/Unix) | OK | OK | Prerequisites1 | NO |
| NREC (UH-IaaS) | OK | OK | NO | NO |
| UiB OneDrive (Microsoft 365) | OK | OK | Prerequisites1 | NO |
Personal cloud service (Dropbox, Google Drive, private OneDrive, etc.) | OK | NO | NO | NO |
| SAFE | OK | OK | OK | OK |
E-post
OPEN | LIMITED | CONFIDENTIAL | STRIGHTLY CONFIDENTIAL | |
|---|---|---|---|---|
| UiB's e-mail service (Outlook) | OK | Prerequisites2 | Prerequisites2 | NO |
| Private e-mail (Gmail, Hotmail, etc.) | OK | NO | NO | NO |
Other services
OPEN | LIMITED | CONFIDENTIAL | STRIGHTLY CONFIDENTIAL | |
|---|---|---|---|---|
| CIM | OK | OK | OK | NO |
| Digiforms | OK | OK | OK | NO |
| ePhorte | OK | OK | OK | OK |
| Common Student System (Felles studentsystem, FS) | OK | OK | NO | NO |
| GitLab | OK | Prerequisites1c | NO | NO |
| Self service portal (DFØ) | OK | OK | OK | NO |
| Inspera Assessment | OK | OK | NO | NO |
| Kaltura - video service | OK | OK | NO | NO |
| Mitt UiB (Canvas) | OK | OK | NO | NO |
| SharePoint Online (Project portal, Oppgaveseminar, etc.) | OK | OK | Prerequisites1 | NO |
| Secure video | OK | OK | OK | NO |
| Skjemaker | OK | OK | NO | NO |
| Teams | OK | OK | Prerequisites1 | NO |
| Uib.no | OK | NO | NO | NO |
| UiBhjelp (hjelp.uib.no) | OK | OK | NO | NO |
| Wikis (open) | OK | NEI | NO | NO |
| Wikis (with authentication) | OK | OK | NO | NO |
| Zoom (recording of video meeting) | OK | OK | NO | NO |
May be used if the following security measures are taken: Classification and then encryption of information requiring this.
a. For storage on PC/Mac: Some PCs/Macs managed by the IT division has built-in encryption with Bitlocker (PC) or FileVault (Mac). These are approved for storing yellow data.
b. For memory stick/external hard disk: red data should only be stored in exceptional cases, e.g. long field assignments without network access.
c. For GitLab: the project containing the data mut be set as "Private". Projects that are "Internal" or "Public" should only contain green data.
Avoid sending contents as text or attachment to e-mails. If you have to send yellow or red data, we recommend encrypting a document and then sharing it with the recipient. (See information about Microsoft Information Protection in UiBhjelp for description of the procedure.)