¿Û¿Û´«Ã½

Data Categories

Data Trustees must consult with the Chief Operating Officer prior to approving a law enforcement request to examine, share or distribute University data. Stewards and/or Custodians of University data must escalate and report any legal or law enforcement request made of them to their respective Data Trustee prior to fulfilling any such request. University Data […]

4.01 Data Classification

I. Purpose The purpose of this policy is to document the types and classifications for data and information related to the business of ¿Û¿Û´«Ã½. II. Description Data related to the business of ¿Û¿Û´«Ã½ are defined by the following categories in increasing levels of privacy requirements: Information related to the business of ¿Û¿Û´«Ã½ […]

3.01.01 Physical Security of Morgan Hall Data Center

I. Purpose This procedure documents the steps to ensure physical security to the servers and other contents of the Morgan Hall Data Center. Policy Supported Supports 3.01 Server Physical Security Access. II. Description The custodian for the Morgan Hall Data Center is the Director of IT Infrastructure. Locks The data center must always be locked. […]

3.01 Server Physical Access Security

I. Purpose The purpose of the Server Physical Access Security policy is to require the implementation of procedures to restrict physical access of servers to only individuals requiring physical access. II. Description Servers will be placed in locked facilities. An access control custodian will be assigned for each server location. The CIO will provide for […]

2.03.01 Vulnerability Scanning and Network Security Exception Configuration

I. Purpose This procedure documents ¿Û¿Û´«Ã½â€™s method of granting users access to network resources located on campus from any remote location, via VPN client software and a centralized concentrator. Policy Supported Supports 2.03 Vulnerability Management II. Description An electronic mail request for special network access to a device shall be sent to the Director […]

2.03 Vulnerability Management

I. Purpose The purpose of the Vulnerability Management security policy is to minimize the risk that ¿Û¿Û´«Ã½’s resources are compromised from an attack. Decreasing the time that a resource is vulnerable minimizes the risk of compromise. Policy Supported Supports: II. Description All hosts (servers, computers, and network devices) that are listening on or have […]

2.02.01 Secure Remote Access From Off Campus

I. Purpose This procedure documents ¿Û¿Û´«Ã½â€™s method of granting users access to network resources located on campus from any remote location, via Virtual Private Network (VPN) client software and centralized appliances. Policy Supported Supports 2.02 Secure Transit II. Description Who has VPN access ¿Û¿Û´«Ã½ faculty, staff and students who have a course requirement […]

2.02 Secure Transit

I. Purpose The purpose of the Secure Transit security policy is to ensure that ¿Û¿Û´«Ã½’s Protected data is protected in transit. II. Description Any access of ¿Û¿Û´«Ã½ Protected data through a network not under ¿Û¿Û´«Ã½’s control must be done through a secure protocol. III. Scope This policy pertains to anyone accessing ¿Û¿Û´«Ã½ […]

2.01.01 Network Firewall – Border Control

I. Purpose This procedure documents how ¿Û¿Û´«Ã½ utilizes the firewalls and border routers to protect campus network resources from unauthorized users and malware. Policy Supported Supports 2.01 Network Firewall – Border Control II. Description ¿Û¿Û´«Ã½ will continue to comply with regulations and follow industry best practices by utilizing firewalls to segment the University […]

2.01 Firewall

I. Purpose The purpose of the Firewall security policy is to state that certain regulations require and industry best practices recommend ¿Û¿Û´«Ã½ to limit network traffic with a firewall. Network traffic is limited into and out of a security zone in which Proprietary data resides. II. Description ¿Û¿Û´«Ã½ will continue to comply with […]