Review Penn State Data Security Policies

Penn State Information Storage Policies

Microsoft 365 and its applications are not approved by Penn State University for the storage of “High” or “Restricted” information. Penn State’s Policy AD95 establishes guidelines for information classification and handling within the University. Refer to the following resources before using and storing information created by any Microsoft 365 tool or application. Please contact security@psu.edu with any questions.

• AD95 Information Assurance and IT Security (Formerly AD20) Links to an external site. (PSU resource)
  • NOTE: Use this resource to gain an understanding of information storage policies at Penn State.
• Information Classification Decision Tool Links to an external site. (PSU resource)
  • NOTE: Use this tool to help you determine the classification level of your information.