°ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023

Purpose

To provide °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 with guidance in developing and implementing the appropriate protective safeguards to ensure the confidentiality, integrity, and availability of °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 assets and information.

Policy

°ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023’s information, data, and records are managed in a manner consistent with °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023’s risk strategy to protect the confidentiality, integrity, and availability of the assets. Data security controls are submitted to °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 senior leadership for review and approval, and include a cost-benefit analysis to inform the executive staff in their risk strategy decisions.

Summary

• Data security controls are submitted to °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 senior leadership for review and approval
• Data security controls will include a cost-benefit analysis to inform the executive staff in their risk strategy decisions
• °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 employs cryptographic controls in accordance with applicable Federal and State laws, regulations and standards
• °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 system that requires protection includes but is not limited to configuration settings, intrusion detection and prevention, various logs and password databases
• °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 protects the confidentiality and integrity of sensitive data by using cryptographic mechanisms
• °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 applies full disk encryption to all °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023-owned laptops, mobile devices and desktop workstations
• Backups are encrypted (at rest)
• °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 recommends that students enable full disk encryption on their personal devices
• All transportable media is also encrypted
• Papers containing confidential information must not be left out in public view and must be properly destroyed when no longer needed
• °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 hardware and software assets are documented, tracked, and managed through inventory management
• Faculty and staff status is tracked and managed by Human Resources and the Dean of the College
• Student documentation is managed by °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023, Registrar’s Office, the Dean of Students and the Advancement Office depending upon student status
• Prior to disposal, sanitization techniques are applied to media
• °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 ensures that there is adequate capacity to provide availability of its systems
• °ÄÃÅÁùºÏ²Ê¿ª½±½á¹û2023 employs reasonable and appropriate methods for data loss prevention

Data Security Policy Details [pdf]