Cloud policy

The Policy on the Use of Public Cloud Computing Services applies the principles of the Information Classification Policy to ensure the secure and responsible use of public cloud services. The policy contains:

• the concept of sanctioned versus unsanctioned cloud services – the first being cloud services that have been officially approved or contracted by the University, and the latter all other cloud services;
• requirements for the processing of public, private, confidential or personal information in the public cloud;
• risk factors to be taken in account when considering the transfer of private, confidential or personal information to the public cloud;

The following links may be used to access the documents on the staff Intranet:

• Information classification policy
• [https://www1.up.ac.za/cs/groups/staff/@contrib/documents/document/chby/mtq3/~edisp/uppr147195.xlsx Information and Data Governance Matrix:

]

• [https://www1.up.ac.za/cs/groups/public/documents/document/chby/mjmz/~edisp/uppr233929.pdf Policy on the Use of Public Cloud Computing Services:

]