Information Security Policies & Procedures

Overview

ISC's Office of Information Security establishes policies that comply with the University, state and federal regulations. These policies address the requirement to protect information from disclosure, unauthorized access, loss/corruption of electronic and physical data. Along with well-documented standards and procedures, the policies enable an organization to manage business risk through defined controls which provide a benchmark for audit and corrective action. Notable policies and standards include:

• Computing Policies and Guidelines
• Information Security Standards
• Computer Security Policy
• Policy on Acceptable Use of Electronic Resources
• Policy on Unauthorized Copying of Copyrighted Media
• Policy on Computer Disconnection from PennNet
• Policy on Requirements for Authenticated Access to PennNet
• Information Systems Security Incident Response Policy

Procedures

• Response to a Compromised Computer with Sensitive Data
• PGP Key Signing Procedure

Guidelines

• Security Logging Guidelines
• Penn Data Risk Classification

Forms

• Employee Exit IT Checklist