Body
End-User Cloud Storage Policy
Purpose
To inform users about their university cloud storage options.
OneDrive is the Primary Cloud Storage for SVSU
OneDrive for Business is a cloud, file storage app that is part of Microsoft 365. OneDrive includes sharing and collaborative editing tools. SVSU employees and registered students are eligible to use OneDrive. Users can access OneDrive files on the web, using the OneDrive for Business desktop app, or from the OneDrive mobile app. Up to 1 TB (terabyte) of storage is provided to each user. It has version control, providing backups that can be accessed up to 90 days. It can be accessed from any device with an Internet connection.
Alternate Cloud Storage of SVSU Data is Prohibited
Since OneDrive is the primary cloud storage solution provided for SVSU users, installing alternate (third party) clients for data storage is not allowed. Common alternate cloud storage solutions not allowed would include Dropbox, Google Drive, iCloud and others,
Securing SVSU data in the cloud requires IT Services being able to scan the data for PII data (Personal Identifiable Information) to further protect against . The AUP (Acceptable Use Policy) prohibits the exposure of such data, especially on third party cloud storage systems. In addition, SVSU requires vendors providing such services to be vetted for their own security practices (by supplying a HECVAT - Higher Education Community Vendor Assessment Tool (HECVAT) is a security assessment template that attempts to generalize higher education information security and data protection questions and issues regarding cloud services for consistency and ease of use.
What if I Need Access to Personal Files?
Most personal cloud solutions provide users access via a web browser, and do not require the client to be installed. While it's more convenient to use a client, it is another piece of software that could be used to compromise the user's system to further compromise or attack SVSU data and resources.
OneDrive provides far more storage than alternate cloud storage solutions provide and is easily accessible. Therefore, installing clients for alternate cloud storage solutions is not necessary when using SVSU equipment.