Standard: Information Security Awareness Training
|
|
|
- Cordelia Douglas
- 7 years ago
- Views:
Transcription
1 Standard: Information Security Awareness Training Page 1
2 Executive Summary San Jose State University (SJSU) is highly diversified in the information that it collects and maintains on its community members. It is the university s responsibility to be a good steward and custodian of the information that it has been entrusted, which must be upheld by all members of the university. The overall protection of the data assets must begin with the individual who has access to them. Approved by all labor unions, CSU Policy Number states all employees with access to protected data and information assets must participate in appropriate information security awareness training on a periodic basis. Information security training will be required annually. The campus information security awareness program will promote campus strategies for protecting information assets containing protected data. The Information Security Awareness Training Standard defines the requirements for training of any individuals who handle sensitive information for the campus. This standard of due care will help prevent the unauthorized access, modification, and loss of sensitive campus information. Page 2
3 Information Security Standards Information Security Awareness Training Standard IS-ISAT Effective Date 11/10/2015 # Version 3.0 Contact Mike Cook Phone Revision History Date Action 7/8/2014 Draft sent to Mike 12/1/2014 Reviewed. Content suggestions. Added comments. Hien Huynh 04/08/2015 Added Content suggestions. Hien Huynh 11/10/2015 Incorporated changes from campus constituents Distributed to Campus Page 3
4 Table of Contents Executive Summary... 2 Introduction and Purpose... 5 Scope... 5 Standard... 5 Training Schedule... 5 Training Assignment... 5 Incomplete Training... 5 Training Requirements... 5 Mandatory Training for all individuals... 5 Payment Card Industry (PCI) Training... 5 Health Insurance Portability and Accountability Act (HIPAA) Training... 5 Page 4
5 Introduction and Purpose This Information Security Awareness Training standard defines the requirements for training of any individuals who handle sensitive information for the campus. This standard of due care will help prevent the unauthorized access, modification, and loss of sensitive campus information. Scope As required by ICSUAM8035, this standard applies to all SJSU State, Self-Fund, and Auxiliary ( campus ) employees, faculty and staff, including student assistants. Standard Training Schedule Information Security Awareness Training shall be administered to all employees at time of employment and bi-annually thereafter. Training Assignment All required information security training for employees will be assigned by the Information Security Office. Individuals will have 90 days to complete the training, once assignment has been made. If training is not completed in the required timeframe, the Information Security Office shall issue a report to the appropriate Vice President s Office and access may be revoked. Incomplete Training Reports of individual failure to complete the mandatory training will be delivered to Cabinet. IT Services reserves the right to terminate system access to individuals found to be negligent of required security awareness training. Training Requirements Mandatory Training for all individuals Each individual shall complete a mandatory bi-annual information security awareness and Family Education Rights and Privacy Act (FERPA) training program. Information Security training will be administered by the Information Security Office. FERPA training will be administered by the Office of the Registrar. Payment Card Industry (PCI) Training Any individuals who handle credit cards will be issued an annual PCI training. Training for PCI is based on job duties of the individual. Health Insurance Portability and Accountability Act (HIPAA) Training Any individuals who have access to medical records will be issued an annual HIPAA training, to be administered by the Student Health Center or Speech Therapy Clinic as appropriate. Training for HIPAA is based on job duties of the individual. Page 5
Standard: Vulnerability Management and Assessment
Standard: Vulnerability Management and Assessment Page 1 Executive Summary San Jose State University (SJSU) is highly diversified in the information that it collects and maintains on its community members.
Standard: Email Retention
Information Security Standards Email Retention Standard IS-ER Effective Date TBD Email security@sjsu.edu # Version 2.0 Contact Mike Cook Phone 408-924-1705 Standard: Email Retention Page 1 Executive Summary
The Importance of Organizing Your SJSU Information Assets
Standard: Asset Control Page 1 Executive Summary The Asset Control Standard defines the requirements for controlling and ensuring all SJSU computing hardware, software, and confidential assets are identified,
Standard: Email and Campus Communication
Information Security Standards Email and Campus Communication Standard IS-ECC Effective Date TBD Email security@sjsu.edu # Version 2.0 Contact Mike Cook Phone 408-924-1705 Standard: Email and Campus Communication
Standard: Patching and Malicious Code Management
Standard: Patching and Malicious Code Management Page 1 Executive Summary San Jose State University (SJSU) is highly diversified in the information that it collects and maintains on its community members.
Standard: Application Service Provider Security Requirements
Standard: Application Service Provider Security Requirements Page 1 Executive Summary SJSU has the option to select and contract with approved 3 rd parties, application service providers, services and
Standard: Data Center Security
Information Security Standards Data Center Security Standard IS-DCS Effective Date TBD Email security@sjsu.edu # Version 3.0 Contact Mike Cook Phone 408-924-1705 Standard: Data Center Security Page 1 Executive
Standard: Information Security Incident Management
Standard: Information Security Incident Management Page 1 Executive Summary California State University Information Security Policy 8075.00 states security incidents involving loss, damage or misuse of
Standard: Network Security
Standard: Network Security Page 1 Executive Summary Network security is important in the protection of our network and services from unauthorized modification, destruction, or disclosure. It is essential
Standard: 802.11 Airwave
Standard: 802.11 Airwave Page 1 Executive Summary Information Technology Services (ITS) recognizes the increased use and availability of various wireless technologies at SJSU. SJSU is responsible for providing
Standard: Event Monitoring
Standard: Event Monitoring Page 1 Executive Summary The Event Monitoring Standard defines the requirements for Information Security event monitoring within SJSU computing resources to ensure that information
Approved by President Mohammed Qayoumi. Reviews: IT Management Advisory Committee
Policy History Date Action Approved by President Mohammed Qayoumi May 27, 2013 April 9, 2013 Reviews: IT Management Advisory Committee Draft Policy Released Table of Contents Introduction and Purpose...
Cal Poly Information Security Program
Policy History Date October 5, 2012 October 5, 2010 October 19, 2004 July 8, 2004 May 11, 2004 January May 2004 December 8, 2003 Action Modified Separation or Change of Employment section to address data
The California State University Office of Audit and Advisory Services CSU CONSTRUCTION. San José State University. Student Wellness Center
CSU The California State University Office of Audit and Advisory Services CONSTRUCTION San José State University Student Wellness Center Audit Report 16-09 May 25, 2016 EXECUTIVE SUMMARY OBJECTIVE The
Rowan University Data Governance Policy
Rowan University Data Governance Policy Effective: January 2014 Table of Contents 1. Introduction... 3 2. Regulations, Statutes, and Policies... 4 3. Policy Scope... 4 4. Governance Roles... 6 4.1. Data
Information Security Policy and Handbook Overview. ITSS Information Security June 2015
Information Security Policy and Handbook Overview ITSS Information Security June 2015 Information Security Policy Control Hierarchy System and Campus Information Security Policies UNT System Information
Standard: Web Application Development
Information Security Standards Web Application Development Standard IS-WAD Effective Date TBD Email security@sjsu.edu # Version 2.0 Contact Mike Cook Phone 408-924-1705 Standard: Web Application Development
Who Should Know This Policy 2 Definitions 2 Contacts 3 Procedures 3 Forms 5 Related Documents 5 Revision History 5 FAQs 5
Information Security Policy Type: Administrative Responsible Office: Office of Technology Services Initial Policy Approved: 09/30/2009 Current Revision Approved: 08/10/2015 Policy Statement and Purpose
Information Security Plan May 24, 2011
Information Security Plan May 24, 2011 REVISION CONTROL Document Title: Author: HSU Information Security Plan John McBrearty Revision History Revision Date Revised By Summary of Revisions Sections Revised
Data Management Standard
Data Management Standard Revision: Version 1.0 Date: 11/2015 Status: Approved by ISAC, Reviewed by Chancellor s Cabinet 1. Objectives Page 1 2. Scope Statement. Page 1 3. Requirements..Page 1 4. Definitions
R345, Information Technology Resource Security 1
R345, Information Technology Resource Security 1 R345-1. Purpose: To provide policy to secure the private sensitive information of faculty, staff, patients, students, and others affiliated with USHE institutions,
IT Security Standard: Computing Devices
IT Security Standard: Computing Devices Revision History: Date By Action Pages 09/30/10 ITS Release of New Document Initial Draft Review Frequency: Annually Responsible Office: ITS Responsible Officer:
INFORMATION TECHNOLOGY DATA MANAGEMENT PROCEDURES AND GOVERNANCE STRUCTURE BALL STATE UNIVERSITY OFFICE OF INFORMATION SECURITY SERVICES
INFORMATION TECHNOLOGY DATA MANAGEMENT PROCEDURES AND GOVERNANCE STRUCTURE BALL STATE UNIVERSITY OFFICE OF INFORMATION SECURITY SERVICES 1. INTRODUCTION If you are responsible for maintaining or using
Index .700 FORMS - SAMPLE INCIDENT RESPONSE FORM.995 HISTORY
Information Security Section: General Operations Title: Information Security Number: 56.350 Index POLICY.100 POLICY STATEMENT.110 POLICY RATIONALE.120 AUTHORITY.130 APPROVAL AND EFFECTIVE DATE OF POLICY.140
ADMINISTRATIVE POLICY # 32 8 2 (2014) Information Security Roles and Responsibilities
Policy Title: Information Security Roles Policy Type: Administrative Policy Number: ADMINISTRATIVE POLICY # 32 8 2 (2014) Information Security Roles Approval Date: 05/28/2014 Revised Responsible Office:
SJSU Electronic Data Disposition Standard
SJSU Electronic Data Disposition Standard Page 1 Executive Summary University data is at risk as long as it is persistently stored on electronic media. This means that data must be properly cared for during
THE UNIVERSITY OF TEXAS AT TYLER DEPARTMENT OF HEALTH AND KINESIOLOGY COURSE INFORMATION
THE UNIVERSITY OF TEXAS AT TYLER DEPARTMENT OF HEALTH AND KINESIOLOGY COURSE INFORMATION FALL 2015 Course Title: Human Motor Control and Learning Lab Course Number: KINE 3132 Sections:.002,.004, and.005
Specific observations and recommendations that were discussed with campus management are presented in detail below.
CSU The California State University Office of Audit and Advisory Services INFORMATION SECURITY California State University, San Bernardino Audit Report 14-55 March 18, 2015 EXECUTIVE SUMMARY OBJECTIVE
Title: Number: Responsible Office: Last Revision:
Title: Number: Responsible Office: Last Revision: Cloud Computing: Opportunities Used Safely G4 004D Information Security and Privacy Office July 2011 The following guidance was developed and published
Western Oregon University Information Security Manual v1.6
Table of Contents: 000 Introductory Material 001 Introduction Western Oregon University v1.6 Please direct comments to: Bill Kernan, Chief Information Security Officer 100 Information Security Roles and
INFORMATION SECURITY Humboldt State University
CSU The California State University Office of Audit and Advisory Services INFORMATION SECURITY Humboldt State University Audit Report 14-50 October 30, 2014 EXECUTIVE SUMMARY OBJECTIVE The objectives of
Information Security Policy
Information Security Policy Policy Contents I. POLICY STATEMENT II. REASON FOR POLICY III. SCOPE IV. AUDIENCE V. POLICY TEXT VI. PROCEDURES VII. RELATED INFORMATION VIII. DEFINITIONS IX. FREQUENTLY ASKED
Information Security Policy
Information Security Policy Introduction The purpose of the is policy is to protect Rider University information resources from accidental or intentional unauthorized access, modification, or damage and
A Strategic Vision for Human Resources
DISCUSSION DOCUMENT A Strategic Vision for Human Resources Organizational Possibilities Fitting the Pieces Together November 7, 2007 Costa Mesa, CA Framework Systems Theory Strategic Vision for Human Resources
Policy No: TITLE: EFFECTIVE DATE: CANCELLATION: REVIEW DATE:
Policy No: TITLE: AP-AA-17.2 Data Classification and Data Security ADMINISTERED BY: Office of Vice President for Academic Affairs PURPOSE EFFECTIVE DATE: CANCELLATION: REVIEW DATE: August 8, 2005 Fall
UNIVERSITY OF ROCHESTER INFORMATION TECHNOLOGY POLICY
PURPOSE The University of Rochester recognizes the vital role information technology plays in the University s missions and related administrative activities as well as the importance in an academic environment
PETTY CASH AND CHANGE FUNDS
PURPOSE To provide procedures and guidance to maintain an adequate system of internal control to protect petty cash and change funds from loss in accordance with ICSUAM Policy and ICSUAM 3103.11. SCOPE
FAYETTEVILLE STATE UNIVERSITY POLICY ON INFORMATION SECURITY
FAYETTEVILLE STATE UNIVERSITY POLICY ON INFORMATION SECURITY Authority: Category: Applies to: Chancellor, Fayetteville State University University-wide Faculty, Staff, and Students History: Approved on
DRAFT IDAHO STATE UNIVERSITY POLICIES AND PROCEDURES (ISUPP) Asset Management Policy #2430
DRAFT IDAHO STATE UNIVERSITY POLICIES AND PROCEDURES (ISUPP) Asset Management Policy #2430 POLICY INFORMATION Major Functional Area (MFA): Finance and Administration Policy Title: Asset Management Responsible
FORT HAYS STATE UNIVERSITY CREDIT CARD SECURITY POLICY
FORT HAYS STATE UNIVERSITY CREDIT CARD SECURITY POLICY Page 1 of 6 Summary The Payment Card Industry Data Security Standard (PCI DSS), a set of comprehensive requirements for enhancing payment account
WORKSTATION MANAGEMENT STANDARD PROCEDURES
OFFICE OF THE VICE PRESIDENT FOR INFORMATION TECHNOLOGY POST OFFICE BOX 8122 STATESBORO, GEORGIA 30460-8122 TELEPHONE (912) 478-1294 FAX (912) 478-7720 WORKSTATION MANAGEMENT STANDARD PROCEDURES I. Authorization
Information Security Program
Stephen F. Austin State University Information Security Program Revised: September 2014 2014 Table of Contents Overview... 1 Introduction... 1 Purpose... 1 Authority... 2 Scope... 2 Information Security
Information Security Manager Training
Information Security Manager Training Kent Swagler CCEP Director, Corporate Compliance Direct line (314) 923-3097 Cell (314) 575-8334 kswagler@metrostlouis.org Information Security Manager Training Overview
IDENTITY MANAGEMENT AND COMMON SYSTEM ACCESS HUMBOLDT STATE UNIVERSITY. Audit Report 12-46 December 21, 2012
IDENTITY MANAGEMENT AND COMMON SYSTEM ACCESS HUMBOLDT STATE UNIVERSITY Audit Report 12-46 December 21, 2012 Henry Mendoza, Chair William Hauck, Vice Chair Lupe C. Garcia Steven M. Glazer Hugo N. Morales
Harmonizing Your Compliance and Security Objectives. Bonnie A. Goins Adjunct Professor, Illinois Institute of Technology
Harmonizing Your Compliance and Security Objectives Bonnie A. Goins Adjunct Professor, Illinois Institute of Technology Make sure efforts serve multiple purposes Use standards to guide effort Repeatable
Virginia Commonwealth University Information Security Standard
Virginia Commonwealth University Information Security Standard Title: Scope: Data Classification Standard This document provides the classification requirements for all data generated, processed, stored,
8.1.6 POLICY ON KEYS AND OTHER BUILDING ACCESS DEVICES. Policy Statement COLLEGE OF CHARLESTON POLICY ON
OFFICIAL POLICY 8.1.6 POLICY ON KEYS AND OTHER BUILDING ACCESS DEVICES 03/21/11 Policy Statement COLLEGE OF CHARLESTON POLICY ON KEYS AND OTHER BUILDING ACCESS DEVICES 1.0 PURPOSE OF POLICY The purpose
UNIVERSITY OF CALIFORNIA Office of Academic Personnel Academic Personnel Manual (APM) Policy Development Process Guide
Overview The at the University of California Office of the President manages the Academic Personnel Manual (APM) policy development process from inception to issuance on behalf of the Provost and Executive
A new ERP to support Puget Sound s success
A new ERP to support Puget Sound s success a) A guttural utterance b) A small town in the Netherlands c) Enterprise Resource Planning, an integrated technology solution for managing the internal and external
MANUAL OF UNIVERSITY POLICIES PROCEDURES AND GUIDELINES. Applies to: faculty staff students student employees visitors contractors
Page 1 of 5 Applies to: faculty staff students student employees visitors contractors Effective Date of This Revision: October 19, 2006 Contact for More Information: Chief Privacy Officer 1303 A West Campus
Log Management Standard 1.0 INTRODUCTION 2.0 SYSTEM AND APPLICATION MONITORING STANDARD. 2.1 Required Logging
Log Management Standard Effective Date: 7/28/2015 1.0 INTRODUCTION The California State University, Chico system/application log management standard identifies event logging requirements, log review frequency,
University of Illinois at Chicago Health Sciences Colleges Information Technology Group Security Policies Summary
University of Illinois at Chicago Health Sciences Colleges Information Technology Group Security Policies Summary This Summary was prepared March 2009 by Ian Huggins prior to HSC adoption of the most recent
Oklahoma State University Policy and Procedures. Red Flags Rules and Identity Theft Prevention
Oklahoma State University Policy and Procedures Rules and Identity Theft Prevention 3-0540 ADMINISTRATION & FINANCE July 2009 Introduction 1.01 Oklahoma State University developed this Identity Theft Prevention
California State University, Sacramento INFORMATION SECURITY PROGRAM
California State University, Sacramento INFORMATION SECURITY PROGRAM 1 I. Preamble... 3 II. Scope... 3 III. Definitions... 4 IV. Roles and Responsibilities... 5 A. Vice President for Academic Affairs...
Identity Theft Prevention Program (Approved by the Board of Trustees)
Administrative Regulation 8:8 Responsible Office: EVPFA Date Effective: 9/15/2009 Supersedes Version: No previous version Identity Theft Prevention Program (Approved by the Board of Trustees) Major Topics
126CSR25A TITLE 126 LEGISLATIVE RULE BOARD OF EDUCATION SERIES 25A STANDARDS FOR BASIC AND SPECIALIZED HEALTH CARE PROCEDURES (2422.
TITLE 126 LEGISLATIVE RULE BOARD OF EDUCATION SERIES 25A STANDARDS FOR BASIC AND SPECIALIZED HEALTH CARE PROCEDURES (2422.7) 126-25A-1. General. 1.1. Scope. - This legislative rule establishes standards
PII Personally Identifiable Information Training and Fraud Prevention
PII Personally Identifiable Information Training and Fraud Prevention Topics What is Personally Identifiable Information (PII)? Why are we committed to protecting PII? What laws govern us? How do we comply?
Date of Last Review Senior Vice President for Academic. September 2015 Affairs INFORMAL REVIEW DRAFT
Minnesota State University, Mankato University Policy Policy Name: University Data Effective Date of Last Revision Governance July 1, 2016 Custodian of Policy: Provost and Date of Last Review Senior Vice
STATEMENT OF PRIVACY PRACTICES
STATEMENT OF PRIVACY PRACTICES We, at Seattle Smile Works, are dedicated to protect the privacy rights of our patients and the confidential information entrusted to us. The commitment of each employee
UMDNJ Information Security Plan 2007
UMDNJ Information Security Plan 2007 W. Thompson Page 1 6/4/2007 Table of Contents Table of Contents... 2 Introduction... 3 Contact... 4 Risk Assessment... 5 Plan Components... 6 Awareness... 7 Policy
PHYSICAL THERAPY PROGRAM AGREEMENT FOR CLINICAL EDUCATION OF PHYSICAL THERAPY STUDENTS
PHYSICAL THERAPY PROGRAM AGREEMENT FOR CLINICAL EDUCATION OF PHYSICAL THERAPY STUDENTS The agreement, made and entered this day of, 2011 by and between (herein after referred to as the Clinical Site) and
PROCEDURES for CAMPUS CASH MANAGEMENT POLICY ADM-0113 California State University, Sacramento. CASH HANDLING Updated February 2014
PROCEDURES for CAMPUS CASH MANAGEMENT POLICY ADM-0113 California State University, Sacramento CASH HANDLING Updated February 2014 I. ACCEPTING UNIVERSITY FUNDS II. III. IV. CASH CHANGE FUNDS SAFEGUARDING
Coordinated Timetabling: Principles, Rules & Responsibilities Originating/Responsible Department:
Policy Name: Coordinated Timetabling: Principles, Rules & Responsibilities Originating/Responsible Department: Registrar s Office Approval Authority: ARC (Academic and Research Committee) Date of Original
SENSITIVE DATA SECURITY AND PROTECTION CALIFORNIA STATE UNIVERSITY, LOS ANGELES. Audit Report 11-52 January 3, 2012
SENSITIVE DATA SECURITY AND PROTECTION CALIFORNIA STATE UNIVERSITY, LOS ANGELES Audit Report 11-52 January 3, 2012 Henry Mendoza, Chair Melinda Guzman, Vice Chair Margaret Fortune Steven M. Glazer William
Table of Contents. Miami University Page 2
OBIEE Security Authors: Amy Goll Last Updated: 6/12/2012 Table of Contents Miami University s Confidential Information Policy... 4 Security within OBIEE... 5 OBIEE Security Roles... 5 Miami Security Roles...
PROTECTED HEALTH INFORMATION
SUBJECT: PROTECTED HEALTH INFORMATION POLICY: Department of Origin: Compliance Department Responsible Position: Vice President, Compliance and Audit Date(s) of Review and Revision: 12/13; 05/14; 12/14
elearning and Instructional Support: Canvas Administrative Guidelines March 5, 2014
elearning and Instructional Support: Canvas Administrative Guidelines March 5, 2014 Contents I. PURPOSE AND SCOPE... 3 II. ADMINISTRATIVE GUIDELINES... 4 III. DEFINITIONS AND PROCEDURES: USERS... 5 A.
California State University, Northridge Information Security Plan. October 2014
California State University, Northridge Information Security Plan October 2014 REVISION CONTROL Document Title: Author: CSUN Information Security Plan Chris Olsen History Date Owner Summary of Action(s)
SEATTLE UNIVERSITY POLICY ON INVOLUNTARY LEAVE OF ABSENCE FOR MEDICAL REASONS JANUARY 2015
POLICY STATEMENT SEATTLE UNIVERSITY POLICY ON INVOLUNTARY LEAVE OF ABSENCE FOR MEDICAL REASONS JANUARY 2015 The University strives to ensure that all students can fully participate as members of the University
2/3/2015 DATA GOVERNANCE AND FERPA FOUR THINGS YOU CAN DO RIGHT NOW
DATA GOVERNANCE AND FERPA Data Governance Data Procedures and Professional Development MOUs, MOAs, and Contracts FERPA Q&A FOUR THINGS YOU CAN DO RIGHT NOW Communicate the Value of Data Improve Privacy,
INFORMATION SECURITY California Maritime Academy
CSU The California State University Office of Audit and Advisory Services INFORMATION SECURITY California Maritime Academy Audit Report 14-54 April 8, 2015 Senior Director: Mike Caldera IT Audit Manager:
2.0 PAYMENT CARD INDUSTRY DATA SECURITY STANDARDS (PCI-DSS)
CSU, Chico Credit Card Handling Security Standard Effective Date: July 28, 2015 1.0 INTRODUCTION This standard provides guidance to ensure that credit card acceptance and ecommerce processes comply with
Business Intelligence & Reporting. Application Access Guidelines
Business Intelligence & Reporting Application Access Guidelines DOCUMENT CONTROL DOCUMENT REFERENCE File Name: UTD Business Intelligence & Reporting Application Access Guidelines VERSION CONTROL All revisions
Date: December 17, 2010 Code: TECHNICAL LETTER HR/PCOS 2010-02. To: Human Resources Directors Response By: January 28, 2011
Office of the Chancellor 401 Golden Shore, 4 th Floor Long Beach, CA 90802-4210 562-951-4411 Email: hradmin@calstate.edu Date: December 17, 2010 Code: HR/PCOS 2010-02 To: Human Resources Directors Response
Privacy and Security Awareness, Education and Training Policy
Privacy and Security Awareness, Education and Training Policy Version Approval Date Owner 1.0 June 4, 2015 Pam Clarke 1. Purpose HealthShare Exchange of Southeastern Pennsylvania, Inc. (HSX) is committed
Online Privacy Policy
Online Privacy Policy General. This document describes the online privacy policy ( Privacy Policy ) for the DermatologistOnCall Service ( DOC Service ) for the website located at http://www.dermatologistoncall.com
Administrative Procedure
Administrative Procedure Number: 707 Effective: 5/13/2011 Supersedes: INTERIM Page: 1 of 11 Subject: RECORDS RETENTION, MANAGEMENT, AND DISPOSITION PROGRAM 1.0. PURPOSE: 1.1. To establish and administer
Turning Point Program
Turning Point Program Student Application Packet Year: APPLICATIONS WILL BE ACCEPTED ONLY BY MAIL All applications will be reviewed by the Turning Point Application Committee Bergen Community College Turning
Enterprise Security Administrative Computing and Telecommunications Audit & Management Advisory Services Project 2014-05
SAN DIEGO: AUDIT & MANAGEMENT ADVISORY SERVICES 0919 Min Yao Assistant Vice Chancellor Administrative Computing and Telecommunications 0928 August 27, 2014 Subject: Enterprise Security Administrative Computing
San José State University Vice President for Administration and Finance and Chief Financial Officer. Position Description
San José State University Vice President for Administration and Finance and Chief Financial Officer Position Description San José State University (SJSU) is conducting a national search for the position
Texas Medical Records Privacy Act
A COALFIRE PERSPECTIVE Texas Medical Records Privacy Act Texas House Bill 300 (HB 300) Rick Dakin, CEO & Co-Founder Rick Link, Director Andrew Hicks, Director Overview The State of Texas has pushed ahead
Encryption Security Standard
Virginia Commonwealth University Information Security Standard Title: Encryption Security Standard Scope: Approval February 22, 2012 This document provides the encryption requirements for all data generated,
Page 1 of 15. VISC Third Party Guideline
Page 1 of 15 VISC Third Party Guideline REVISION CONTROL Document Title: Author: File Reference: VISC Third Party Guidelines Andru Luvisi CSU Information Security Managing Third Parties policy Revision
SAN DIEGO STATE UNIVERSITY
SAN DIEGO STATE UNIVERSITY INFORMATION SECURITY PLAN VERSION 2.3 Please send questions and comments to ISO@sdsu.edu Executive Summary The applies to San Diego State University and Auxiliary employees,
AUGUST 28, 2013 INFORMATION TECHNOLOGY INCIDENT RESPONSE PLAN. 1250 Siskiyou Boulevard Ashland OR 97520
AUGUST 28, 2013 INFORMATION TECHNOLOGY INCIDENT RESPONSE PLAN 1250 Siskiyou Boulevard Ashland OR 97520 Revision History Revision Change Date 1.0 Initial Incident Response Plan 8/28/2013 Official copies
How To Manage Information Security At A University
Data Management & Protection: Roles & Responsibilities Document Version: 1.0 Effective Date: December, 2008 Original Issue Date: December, 2008 Most Recent Revision Date: November 29, 2011 Approval Authority:
Documenting Therapy Services under IDEA 2004
CHAPTER 5 Documenting Therapy Services under IDEA 2004 Documenting Therapy Services on an IFSP As with IEPs, therapy services on the IFSP may be listed as supplemental aids and services, adaptations, accommodations
Academic Calendar 2015-2018 Arkansas State University - Jonesboro
Shared Governance Proposal Any constituent (individual or group) may submit a proposal into the shared governance process. In order to be considered, each proposal must contain the following and be directed
Pacific University. Policy Governing. Identity Theft Prevention Program. Red Flag Guidelines. Approved June 10, 2009
Pacific University Policy Governing Identity Theft Prevention Program Red Flag Guidelines Approved June 10, 2009 Program adoption Pacific University developed this identity Theft Prevention Program ( Program
Introduction and Purpose... 2 Scope... 2 Auxiliary units... 2. Part-Time, Temporary faculty/staff, Volunteer, Contractor and Student Assistants...
Contents Workstation Refresh & Virtual Desktop Infrastructure Program Introduction and Purpose... 2 Scope... 2 Auxiliary units... 2 Part-Time, Temporary faculty/staff, Volunteer, Contractor and Student
Preceptor Handbook. Veterinary Technology Distance Learning Program. San Juan College
1 Preceptor Handbook Veterinary Technology Distance Learning Program San Juan College 2 Introduction to the Handbook If you are a new preceptor let me take the opportunity to thank you for your willingness
Chief Information Security Officer
POSITION: Chief Information Security Officer ORGANIZATION: Princeton University REPORTS TO: Jay Dominick Vice President for Information Technology & Chief Information Officer LOCATION: Princeton, NJ POSITION
Norwich University Information Assurance Security Policy. Final Version 10.0 for Implementation
Norwich University Information Assurance Security Policy Final Version 10.0 for Implementation Table of Contents Norwich University... 0 Information Assurance Security Policy... 0 1.0 Introduction... 2
Top Ten Technology Risks Facing Colleges and Universities
Top Ten Technology Risks Facing Colleges and Universities Chris Watson, MBA, CISA, CRISC Manager, Internal Audit and Risk Advisory Services cwatson@schneiderdowns.com April 23, 2012 Overview Technology
FACILITIES MANAGEMENT DEPARTMENT
FACILITIES MANAGEMENT DEPARTMENT Policy Title: Key Control and Card Access Policy Policy Number D-12 Section: Safety and Security Effective Date: April 12, 2007 Last Review: April 12, 2007 Purpose: The
THE CITY UNIVERSITY OF NEW YORK FERPA RELEASE FORM PERMISSION FOR ACCESS TO EDUCATIONAL RECORDS
THE CITY UNIVERSITY OF NEW YORK FERPA RELEASE FORM PERMISSION FOR ACCESS TO EDUCATIONAL RECORDS This form allows students to grant third parties, including parents, access to their educational records
Information Resources Security Guidelines
Information Resources Security Guidelines 1. General These guidelines, under the authority of South Texas College Policy #4712- Information Resources Security, set forth the framework for a comprehensive
STUDENT RECORD POLICY, PROCEDURES AND DEFINITIONS
STUDENT RECORD POLICY, PROCEDURES AND DEFINITIONS PURPOSE The purpose of establishing this policy is to ensure Virginia Union University s compliance with the Family Educational Rights and Privacy Act
Info for Students seeking a BA in Social Work (BASW) Students who want to Change Majors to Social Lower Division (pp. 4-5) Upper Division (pp.
Info for Students seeking a BA in Social Work (BASW) Undeclared Students who applied for Social Work major were not able to get in Upper Division Junior College Transfers (pp. 1-3) Students who want to