JagMail (Google/G Suite)安全消息功能

General Guidance

  • The University HIPAA office and the Computer Services Center have determined that the following components of the University-contracted G Suite for Education (formerly titled “Google Apps for Education”), when appropriately used, provide the basic  technical and contractual requirements for communication of HIPAA protected data:
    • JagMail邮件(@southalabama).edu)
    • Google Drive/Google Shared Drives
    • 谷歌文档和表格

  • This document does not address the suitability of your business practices with regard to confidential data nor whether you are compliant with HIPAA regulations. It is assumed that you have reviewed your practices and procedures with the appropriate University offices to determine whether the data in question may be shared and with whom it may be shared.

  • These G Suite services may be used in addition to USANAS, the on-campus networked storage system. For most offices exchanging information primarily at University locations, USANAS将是首选的共享/存储系统.  所有教职员工办公室 可以要求访问USANAS吗. Please contact helpdesk@8011886.com for assistance.

  • Although the commercial Gmail system shares many technical characteristics with the University G Suite (JagMail), it is not covered by University contract and does not meet all University technical and administrative requirements for confidential data. It is not approved for PHI or other University confidential data. Using it for such purposes potentially exposes you to personal liability in addition to violating University policies.

  • Although the JagMail email system meets contractual and technical requirements for transmittal of sensitive data including PHI, email is subject to the following concerns:
    • Email can easily be sent to the wrong recipients (or mistakenly forwarded by valid 收件人到不合适的收件人)
    • 消息一旦发送就不可能收回.
    • Recipients with auto-forwarding may propagate the message beyond your intent.
    • Email messages persist in sent mail folders and may reside on multiple devices, including smart phones.  It is difficult - if not impossible  - to meet document retention and 电子邮件处理要求.

  • The Computer Services Center recommends that whenever possible email be used to alert or notify 但不能传输或传递敏感信息.  (例如,您可以放置 confidential data within a Google Drive and use email to provide access links.)

 

Security Features

The following security features are available to all users of JagMail (the @8011886.com/@jagmail.8011886.com G Suite system.)

 

双因素认证

All users can activate 2 factor authentication, recommended for everyone, but essential 任何传输或存储敏感信息的人. Please see  JagMail双因素身份验证 for details. This information can also be found on the main University web server by finding “JagMail双因素身份验证” in the A-Z index.

 

电子邮件传输安全特性

  • 大学之间的所有电子邮件@health.8011886.com和JagMail系统 通过加密通道. (也称为传输层安全性,或TLS) JagMail用户之间的所有电子邮件.

  • #secure主题关键字

    For communications outside the two University systems, any user of @8011886.com or @jagmail.southalabama.Edu可能会要求电子邮件只能通过加密的方式发送 通过添加关键字“#secure的标题.

    If the email system cannot deliver over TLS channels, you will receive an error message 从系统,它将不会被交付. 然后你可以决定是否另一个 method - such as a Google Drive share - is an appropriate alternative.

Google Drive and Shared Drives  (including Google Docs and Sheets)

  • Access to these services is only over secure, encrypted channels.

  • Google Drive space is "unlimited" for the University G Suite.  

  • Sharing options: 
    • Google Drive permits flexible sharing controls, including limiting access to specific JagMail收件人或所有JagMail用户.
    • 你可以设置股票的到期时间.
    • Files and folders can be shared "to anyone with the link", permitting sharing of data 给JagMail系统之外的个人. When used for sensitive data, this should be for a limited period and unshared once transmitted. 

  • 一般使用建议:
    • Google Drive is tied to an individual user account, and is best suited for individual 用户工作文件和AD hoc共享.
    • Shared Drives exist independently of individual user accounts and are best for shared 项目和长期储存.
    • Health System users can be issued accounts to access Google Drive resources upon request.

  • 更多信息请访问  开始使用Google Drive and  开始使用共享驱动器 and from the Computer Services Center/Academic Computing Help Desk at helpdesk@8011886.com