Information Security
At Bryn Mawr College, our Information Security team is dedicated to protecting the confidentiality, integrity, and availability of institutional and personal data. Through education, policy, oversight, and collaboration, we strive to reduce risk, support innovation, and maintain a safe, trustworthy environment for students, faculty, staff, and partners.
What We Do
Information Security Education
We require and provide training for all community members on topics like phishing, password safety, data handling, device security, and recognizing threats. The goal: enable everyone at the College to understand security risks and how to respond.
Information Stewardship Council
The cross-campus Information Stewardship Council (ISC) is charged with setting standards, monitoring risk, and promoting best practices. The ISC reviews information management strategies, recommends improvements, and helps ensure adherence to policies.
Why It Matters
-
Protecting Community & Institutional Data
Sensitive data—academic records, research materials, administrative information—needs to be handled responsibly to preserve trust, privacy, and compliance. -
Mitigating Risks
From cyber attacks to inadvertent data exposure, risks are ever-present. A robust security program helps the College stay ahead of emerging threats. -
Fostering Safe Innovation
We support technology’s role in education and scholarship—but in a way that balances openness with security.
What We Ask of You
-
Complete required security education/training in a timely manner.
-
Follow College policies like the Acceptable Use Policy, Data Handling Policy, etc.
-
Report suspicious activity (emails, devices, etc.) promptly.
-
Use best practices: strong, unique passwords; multifactor authentication; safe data storage and sharing.
Our Commitment
We pledge to:
-
Continuously review and improve policies, strategies, and technology
-
Work with all campus units to embed security into operations and processes
-
Respond to incidents swiftly, learn from them, and share lessons across the community
-
Provide clear guidance, resources, and support so that information security is accessible, not intimidating