Division of Technology

Training and Awareness

Training

  • Information Privacy Basics for State Employees
    The Enterprise Privacy Office (EPO) has developed training to introduce agency personnel to basic privacy concepts and best practices. The training is available to many agencies through the South Carolina Enterprise Information System (SCEIS) MySCLearning learning management system. A Microsoft PowerPoint version is also available. Contact EPO at privacy.office@admin.sc.gov for more information.
     
  • Online Cybersecurity Training (FREE!)
    Link: https://fedvte.usalearning.gov 
    The U.S. Department of Homeland Security's Federal Virtual Training Environment (FedVTE) is a government-wide, online and on-demand cybersecurity training system designed to help the workforce maintain expertise and foster operational readiness. With courses ranging from beginner to advanced levels, the system is available at no cost to users, and is accessible from any internet-enabled computer. State of South Carolina employees may self-register using their official .gov email address. Government contractors or state, local, tribal and territorial government employees who do not have a .gov, .mil or .fed.us email address, may self-register with the email address used for official government business. Once the system recognizes that you are not using a pre-approved government email address, you will be prompted with further instructions.
     
  • Division of State Human Resources InfoSec and Privacy Professional Development Program
    The Division of State Human Resources has developed a Professional Development Program (PDP) as a critical step towards achieving an Information Security (InfoSec) and Privacy workforce equipped to execute daily tasks, proactively prevent incidents, and protect State citizens and information assets. The components of the PDP include InfoSec and Privacy roles and responsibilities, a competency model for InfoSec and Privacy roles, and position descriptions and a training plan for the InfoSec and Privacy workforce.

EPO Privacy Tips

Other Privacy Tips

 

Terminology

Note: These links provide general definitions for privacy and security terms. Be aware that specific laws and regulations may define these terms differently. 
 

Frequently Asked Questions


Q: What is the difference between privacy and security?

A: Privacy determines what information needs to be protected, to what extent it needs to be protected, and from whom it needs to be protected. Information security (InfoSec) is a mechanism to implement protections.   

Privacy encompasses the analysis of policy and business processes to ensure the legal and ethical obligations of an organization are upheld when the organization collects, stores, uses, and/or discloses sensitive information. This includes: informing the public of the organization’s information practices; providing information on opportunities to choose whether personal information will be shared and of options to restrict access to sensitive information; and assessing risks associated with the unauthorized access to, or loss of, sensitive information.
 
InfoSec refers to the processes and methodologies that are designed and implemented to protect print, electronic, or any other form of confidential, private, and sensitive information or data from unauthorized access, use, misuse, disclosure, destruction, modification, or disruption.