1) Administration and Operation

• 1.01 IT Operational Policy – Development, Approval and Implementation
• 1.02 Security Incident Response
  • 1.02.01 Security Incident Alert Analysis (Procedure)
  • 1.02.02 Security Incident Response (Procedure)

2) Network

• 2.01 Firewall – Border Control
  • 2.01.01 Network Firewall – Border Control (Procedure)
• 2.02 Secure Transit
  • 2.02.01 Secure Remote Access From Off Campus (Procedure)
• 2.03 Vulnerability Scanning
  • 2.03.01 Computer Scanning Policy
• 2.04 Network Switch Access

3) Physical Security

• 3.01 Server Physical Access
  • 3.01.01 Physical Security of Morgan Hall Data Center (Procedure)
• 3.02 Power Backup (UPS/Generator) Requirements
• 3.03 Access to Network Devices
• 3.04 Access to Workstations, Mobile Devices and Printers

4) Data Access

• 4.01 Data Classification
  • 4.01.01 Procedures for Protected Data
• 4.02 Data Ownership
• 4.03 Data Locations
• 4.04 Define Data Trustee, Steward, Custodian, and User
  • 4.04.01 Access and Termination Guidelines (Procedure)
• 4.05 Backup and Retention
  • 4.05.01 Computing Services Server Backup and Retention (Procedure)
  • 4.05.02 Learning Management System (LMS) Site Data Retention Policy

5) Individual Responsibilities

• 5.01 Acceptable Use of Information Technology Resources
• 5.02 Acceptable Electronic Mail Use
• 5.03 Electronic Mail Privacy
  • 5.03.01 Electronic Mail Privacy (Procedure)
• 5.04 Software/Copyright
• 5.05 Electronic Mail Account Usage
  • 5.05.01 Electronic Mail Retention Exceptions (Procedure)
  • 5.05.02 Personal Electronic Mail Recommendation (Procedure)
• 5.06 Malware Policy
  • 5.06.01 Anti-Malware Software (Procedure)
  • 5.06.02 End User Compliance Responsibilities (Procedure)
  • 5.06.03 Non Compliance Response (Procedure)
• 5.07 Mass Electronic Communications Policy