¿Û¿Û´«Ã½

4.02 Data Ownership

I. Purpose The purpose of this policy is to document the ownership of data and information related to the business of ¿Û¿Û´«Ã½. II. Description Data related to the business of ¿Û¿Û´«Ã½ are the property of the University except when covered by other policies. Some data, for example birthdates and SSNs, are the property […]

4.01.01 Procedures for Protected Data

I. Purpose The purpose of this procedure is to track new uses or sharing (with non-regulatory third parties) of Protected data. This is done to know the types of ¿Û¿Û´«Ã½’s data, where it exists, how it is used, and to minimize the risks around handling and transfer of the data, including loss and integrity of […]

Data Governance

Purpose To establish and maintain quality of the University’s data by recommending standards and guidelines around the management of data, including classification, lifecycle and integrity of the data. Vision Everyone has access to the data they need, which is accurate and secure, while respecting the privacy rights of the data subject. Mission To review and […]

Data Categories

Data Trustees must consult with the Chief Operating Officer prior to approving a law enforcement request to examine, share or distribute University data. Stewards and/or Custodians of University data must escalate and report any legal or law enforcement request made of them to their respective Data Trustee prior to fulfilling any such request. University Data […]

4.01 Data Classification

I. Purpose The purpose of this policy is to document the types and classifications for data and information related to the business of ¿Û¿Û´«Ã½. II. Description Data related to the business of ¿Û¿Û´«Ã½ are defined by the following categories in increasing levels of privacy requirements: Information related to the business of ¿Û¿Û´«Ã½ […]

3.01.01 Physical Security of Morgan Hall Data Center

I. Purpose This procedure documents the steps to ensure physical security to the servers and other contents of the Morgan Hall Data Center. Policy Supported Supports 3.01 Server Physical Security Access. II. Description The custodian for the Morgan Hall Data Center is the Director of IT Infrastructure. Locks The data center must always be locked. […]

3.01 Server Physical Access Security

I. Purpose The purpose of the Server Physical Access Security policy is to require the implementation of procedures to restrict physical access of servers to only individuals requiring physical access. II. Description Servers will be placed in locked facilities. An access control custodian will be assigned for each server location. The CIO will provide for […]

2.03.01 Vulnerability Scanning and Network Security Exception Configuration

I. Purpose This procedure documents ¿Û¿Û´«Ã½â€™s method of granting users access to network resources located on campus from any remote location, via VPN client software and a centralized concentrator. Policy Supported Supports 2.03 Vulnerability Management II. Description An electronic mail request for special network access to a device shall be sent to the Director […]

2.03 Vulnerability Management

I. Purpose The purpose of the Vulnerability Management security policy is to minimize the risk that ¿Û¿Û´«Ã½’s resources are compromised from an attack. Decreasing the time that a resource is vulnerable minimizes the risk of compromise. Policy Supported Supports: II. Description All hosts (servers, computers, and network devices) that are listening on or have […]

2.02.01 Secure Remote Access From Off Campus

I. Purpose This procedure documents ¿Û¿Û´«Ã½â€™s method of granting users access to network resources located on campus from any remote location, via Virtual Private Network (VPN) client software and centralized appliances. Policy Supported Supports 2.02 Secure Transit II. Description Who has VPN access ¿Û¿Û´«Ã½ faculty, staff and students who have a course requirement […]