Information Security Policies

Information Security policies are formal statements that specify a set of rules that all users must follow when gaining access to UC’s information and information systems. Please visit UC's main policy page to view all policies.

• Data Governance & Classification Policy
• Acceptable Use of Information Technology Policy
  
• Electronic Mail Policy 
• Cloud Computing Policy
  
• Risk Acceptance Policy
• Clean Desk Policy
  
• Information Security Incident Management & Response Policy
• Privileged Access Policy
• Password Policy
• Data Center Visitor Policy
• Electronic & Information Technology (EIT) Accessibility Policy
• Information Security Review Policy
• Vulnerability Management Policy

• Third Party Access to University IT Resources
• Electronic Media Sanitization Standard
• Network Device Standard
• IT Asset Inventory Standard
• Telecommunications Standards

• Data Center Visitor Procedure
• Information Security Incident Response Procedure
• Vulnerability Management Procedure

• Cloud Computing Guidance
• Data Security Rider
• International Travel Data and Device Guidance