CISER Data & Reproduction Archive Security Policy

Policy Volume: DA
Responsible Executive: Senior Data Librarian
Responsible Office: Cornell Center for Social Sciences
Revised: 2014-03-21, 2020-10-30

The Data Security policy describes physical and information technology measures undertaken to protect CCSS Research Support’s digital data collections from unauthorized access.

All CCSS Research Support file servers, which house the CISER Data & Reproduction Archive, have Windows Antivirus virus protection software installed, and data files are scanned for viruses prior to being added to the environment. Security on the CCSS file servers is monitored by the collection and review of system log files generated on all the systems and the Cisco ASA and Cisco Firepower.

Data Center: The CCSS Research Support servers are located in an environmentally controlled secure University data center, as part of CCSS’s commitment to take all necessary precautions to ensure the physical safety and security of the CISER Data & Reproduction Archive. The data center maintains uninterrupted power supplies (UPS), fire prevention and protection system, physical intruder prevention and detection systems and environmental control systems.

Access to the data center is granted by an authorized proximity card (Cornell University ID card) issued only to Cornell staff with the required credentials according to Cornell University Policy 8.4 — Management of Keys and Other Access Control Systems. Entrance and exits to the data center are automatically logged and monitored by Cornell Information Technology staff within the data center, and the CCSS Research Support file servers are housed in racks with locked doors, to which only authorized system administrators have keys.

Authentication:
  • Public Access: Authentication is not required for access to public-use datasets, if accessing via the archive online catalog. Unauthenticated guests must pass a reCAPTCHA test prior to download.
  • Managed Access: Where the Data Provider obligates, the user would be required to authenticate with CUWebLogin (Cornell NetID required) via the archive online catalog.

Terms of Use: Terms of Use for CCSS Research Support resources and the CISER Data & Reproduction Archive are maintained on the CCSS web site.

Authorization: Access to the CISER Data & Reproduction Archive digital collection is managed by the archive’s restriction levels. Access to non-public, restricted resources is granted by archive personnel through the archive management system. Access terms are granted based on the provider’s data use agreement. Authorization is linked to Cornell NetID authentication.

Receipt of original media: CCSS will employ the highest standard of ingest processing to ensure the quality, integrity, and secure storage of datasets. Refer to the CISER Data & Reproduction Archive Collection Policy for ingest details.

Storage of original Media and electronic copies: Any original media/electronic data that is retained, will be stored in compliance with the CISER Data & Reproduction Archive Preservation and Storage Policy.

Disposal/Decommissioning of data: CCSS reserves the right to decommission data and/or dispose of physical media. The data will be decommissioned/disposed of in line with the directives of the Data Provider.

Backup: Data is backed up by Cornell Information Technology EZ-Backup service.

Security Incidents: Reporting security incidents is mandated by Cornell University Policy 5.4.2, Reporting Electronic Security Incidents.

Policy Review Process: CCSS will review these policies every three years in conjunction with the CoreTrustSeal certification process or any future certification process.

Related Documents