Research Data Security

MSHS Data Services Quick Reference Guide

This is a companion document to IT-27 MSHS Data Classification Policy. This quick reference guide outlines approved Mount Sinai Health System services for storing, processing and transmitting data based on classification levels, Protected, Confidential, Restricted, and Public. It provides clear rules for service usage and security requirements.

• Link: DTP Service Desk Self Help – Mount Sinai Health System Data Services Quick Reference Guide
• For any unlisted services or questions, contact: researchcybersec@mountsinai.org

For additional information, please visit the Research Cybersecurity site for guidance, alerts and regulatory requirements.

• Link to site: Research Cybersecurity – Home

Standalone PC Domain Joining Governance

This document outlines the governance framework and workflow for securely joining standalone Windows PCs to the Mount Sinai Health System domain. It establishes standards for device integration, security compliance, and organizational accountability.

• Purpose: Defines secure procedures for domain joining of standalone Windows PCs.
• Scope: Applies to Windows PCs managed by non-WTS IT teams or vendors, which join the domain under designated Organizational Units (OUs) for structured management and security oversight.
• Roles & Responsibilities: Application Owners, Lab Directors, Vendors, and Local IT teams are responsible for patching, vulnerability remediation, and compliance with security tools (CrowdStrike, Nessus Tenable).
• Data Scope: This process does not involve HIPAA-regulated data.
• Link: DTP Service Desk Self Help – Standalone PC Domain Joining Governance