�ۿ۴�ý

5.01 Acceptable Use of Information Technology Resources

I. Scope This policy covers authorized users who access information technology (IT) resources under the control of �ۿ۴�ý. “Authorized users” include, but are not limited to, currently enrolled students, employees, authorized contractors, vendors, and guests, and other such users authorized by �ۿ۴�ý. It is the responsibility of authorized users to comply with this […]

4.05.02 Learning Management System (LMS) Site Data Retention Policy

I. Purpose Learning Management System (LMS) Site Data Retention Policy is a 72 month FIFO (First in First Out) policy that follows industry standards by eliminating stale data, helping to maintain performance/responsiveness of the LMS, and keeping costs associated with large amounts of data storage manageable. II. Description This 6-year retention of data will allow […]

4.05.01 Information Technology Server Backup and Retention

I. Purpose This procedure documents data backup and retention for servers managed by Information Technology. Policy Supported 4.05 Backup and Retention Policy. II. Description The primary data center is located in Morgan Hall. The secondary data center is located in Macmillan Hall. The tape library is located in the secondary data center at Macmillan Hall. […]

4.05 Backup and Retention

I. Purpose This policy documents the requirements for backup and data retention. II. Description Each server will be backed up on a regular basis. Each Information Technology Data Custodian will be responsible for ensuring that appropriate backup procedures are in place and executed correctly. Each departmental Data Custodian will be responsible for retention, archival, and […]

4.04.01 Access and Termination Guidelines

I. Purpose This procedure documents guidelines Data Custodians are to follow in granting and terminating access to systems and data for which they are responsible. Policy Supported 4.04 Define Data Custodian II. Description Data Custodians with access to confidential University data and/or Protected information are required to notify a designated Information Technology systems administrator via […]

4.04 Define Data Trustee, Steward, Custodian, and User

I. Purpose The purpose of this policy is to define the roles with responsibility for managing University data. II. Description The following roles identify persons who have access to Protected and/or Proprietary Data. Data Trustees Data Stewards Data Custodians Data Users III. Scope This policy pertains to all devices, physical storage, and cloud storage containing […]

4.03 Data Locations

I. Purpose The purpose of this policy is to document the permitted storage locations for data and information related to the business of �ۿ۴�ý. II. Description Data related to the business of �ۿ۴�ý MUST be stored on �ۿ۴�ý-owned devices, �ۿ۴�ý-authorized cloud storage, or �ۿ۴�ý employee-owned devices when used for �ۿ۴�ý-related work (e.g. mobile […]

4.02 Data Ownership

I. Purpose The purpose of this policy is to document the ownership of data and information related to the business of �ۿ۴�ý. II. Description Data related to the business of �ۿ۴�ý are the property of the University except when covered by other policies. Some data, for example birthdates and SSNs, are the property […]

4.01.01 Procedures for Protected Data

I. Purpose The purpose of this procedure is to track new uses or sharing (with non-regulatory third parties) of Protected data. This is done to know the types of �ۿ۴�ý’s data, where it exists, how it is used, and to minimize the risks around handling and transfer of the data, including loss and integrity of […]

Data Governance

Purpose To establish and maintain quality of the University’s data by recommending standards and guidelines around the management of data, including classification, lifecycle and integrity of the data. Vision Everyone has access to the data they need, which is accurate and secure, while respecting the privacy rights of the data subject. Mission To review and […]