JagMail (Google/G Suite)安全消息功能

一般的指导

• The University HIPAA office 和 the Computer 服务 Center have determined that the following components of the University-contracted G Suite for Education (formerly titled “Google Apps for Education”), when appropriately used, provide the basic  technical 和 contractual requirements for communication of HIPAA protected data:
  
  • JagMail邮件(@southalabama).edu)
  • Google Drive/Google Shared Drives
  • 谷歌文档和表格
    
    
• This document does not address the suitability of your business practices with regard to confidential data nor whether you are compliant with HIPAA regulations. 假设 that you have reviewed your practices 和 procedures with the appropriate University offices to determine whether the data in question may 共享 和 with whom it may 共享.
  
  
• These G Suite services may be used in addition to USANAS, the on-campus networked 存储系统. For most offices exchanging information primarily at University locations, USANAS将是首选的共享/存储系统.  所有教职员工办公室 可以要求访问USANAS吗. 请联系 helpdesk@fufanda.com 寻求帮助.
  
  
• Although the commercial Gmail system shares many technical characteristics with the University G Suite (JagMail), it is not covered by University contract 和 does not meet all University technical 和 administrative requirements for confidential data. It is not approved for PHI or other University confidential data. 用它来 purposes potentially exposes you to personal liability in addition to violating University 政策.
  
  
• Although the JagMail email system meets contractual 和 technical requirements for transmittal of sensitive data including PHI, email is subject to the following concerns:
  
  • Email can easily be sent to the wrong recipients (or mistakenly forwarded by valid 收件人到不合适的收件人)
  • 消息一旦发送就不可能收回.
  • Recipients with auto-forwarding may propagate the message beyond your intent.
  • Email messages persist in sent mail folders 和 may reside on multiple devices, including 智能手机.  It is difficult - if not impossible  - to meet document retention 和 电子邮件处理要求.
    
    
• The Computer 服务 Center recommends that whenever possible email be used to 警报 or 通知 但不能传输或传递敏感信息.  (例如，您可以放置 confidential data within a Google Drive 和 use email to provide access links.)

安全特性

The following security features are available to all users of JagMail (the @fufanda.com/@jagmail.fufanda.com G Suite系统.)

双因素认证

All users can activate 2 factor authentication, recommended for everyone, but essential 任何传输或存储敏感信息的人. 请参阅  JagMail双因素身份验证 有关详细信息,. This information can also be found on the main University web server by finding “JagMail双因素身份验证” in the A-Z index.

电子邮件传输安全特性

• 大学之间的所有电子邮件@health.fufanda.com和JagMail系统 通过加密通道. (也称为传输层安全性，或TLS) JagMail用户之间的所有电子邮件.
  
  

• #安全主题关键字

  For communications outside the two University systems, any user of @fufanda.com 或@jagmail.southalabama.Edu可能会要求电子邮件只能通过加密的方式发送 通过添加关键字“#安全的标题.

  If the email system cannot deliver over TLS channels, you will receive an error message 从系统，它将不会被交付. 然后你可以决定是否另一个 method - such as a Google Drive share - is an appropriate alternative.
  
  

Google Drive 和 Shared Drives  (including Google Docs 和 Sheets)

• Access to these services is only over secure, encrypted channels.
  
  
• Google Drive space is "unlimited" for the University G Suite.  
  
  
• 共享选项: 
  • Google Drive permits flexible sharing controls, including limiting access to specific JagMail收件人或所有JagMail用户.
  • 你可以设置股票的到期时间.
  • Files 和 folders can 共享 "to anyone with the link", permitting sharing of data 给JagMail系统之外的个人. When used for sensitive data, this should be for a limited period 和 unshared once 传播. 
    
    
• 一般使用建议:
  • Google Drive is tied to an individual user account, 和 is best suited for individual 用户工作文件和AD hoc共享.
  • Shared Drives exist independently of individual user accounts 和 are best for shared 项目和长期储存.
  • Health System users can be issued accounts to access Google Drive resources upon request.
    
    
• 更多信息请访问  开始使用Google Drive 和  开始使用共享驱动器 和 from the Computer 服务 Center/Academic Computing 帮助 Desk at helpdesk@fufanda.com