Overview
Dartmouth’s Information Security Policy is designed to protect the institution’s confidential information. All Dartmouth offices, faculty, and staff must comply with institutional information security standards and apply the appropriate controls to safeguard the information they manage and use. Students, alumni, and other affiliates who have access to Dartmouth’s confidential information are also required to comply with this policy.
Service Description
The Information Security Team partners with departments and individuals to review information assets, assess risks, and verify compliance with institutional, regulatory, and business requirements. This includes:
	- 
	Consultation to review and inventory information assets. 
- 
	Risk assessment to identify potential vulnerabilities and threats. 
- 
	Control verification to ensure implemented safeguards meet institutional standards. 
- 
	Compliance support for protecting sensitive data, including Personally Identifiable Information (PII) and Protected Health Information (PHI). 
Benefits
	- 
	Assurance that institutional policies and regulatory requirements are being met. 
- 
	Reduced risk of data breaches and compliance violations. 
- 
	Improved confidence in the protection of confidential and sensitive information. 
- 
	Guidance from Information Security professionals on applying appropriate controls. 
Support & Questions
The Information Security Team is available to provide ongoing consultation and guidance. Departments and individuals can request assessments, risk reviews, or compliance consultations through the service catalog or by contacting information.security@dartmouth.edu.