跳到主要内容

数据分类与安全 Operating Procedure 530.01

数据分类与安全 Operating Procedure 530.01
哪个app可以赌足球
系列:500信息服务
Section: 数据分类与安全

交叉引用: 数据分类与安全 Policy 530.00

In accordance with the 数据分类与安全 Policy, 赌钱app可以微信提现 Information Services (IS) has established this Operating Procedure to define College Data classifications and establish roles and responsibilities for handling College Data.

  1. 数据分类定义: All College Data should be classified into one of the following three data classifications which are determined based on the level of sensitivity and impact to the College of unauthorized handling, 使用和披露. College Data may be further classified or defined as required by applicable laws or contractual arrangements. In such instances, those classifications and any applicable restrictions will control.
    • 限制数据 — This data is highly sensitive organizational, employee and student data that is protected by statutes, 规定, 合约协议或政策. If 限制数据 is disclosed without proper authorization or stored without proper access controls, the College may face significant financial or legal risk, such as violation of federal and state privacy laws resulting in administrative or civil action, 或者其他后果, 比如收入损失, negative publicity and decreased morale or public confidence.
    • 敏感数据 — This data is relevant to internal operations and not readily available to the public. Access to 敏感数据 may be guarded due to privacy or ethical reasons. Upon appropriate request, it will be released in a controlled and lawful manner. 在一般情况下, if College Data is not classified as Restricted or Public, it will default to this classification.
    • 公共数据 —  This data may be freely disclosed and available to the public as its disclosure is either beneficial or poses little to no risk to the College.
  2. 角色和职责:
    • 数据所有者 — 数据所有者s are responsible for all College Data supporting the operations overseen by their position. 数据所有者s approve guidelines for the proper use of College Data and may delegate the interpretation and implementation of those guidelines to appropriate personnel. 数据所有者s authorize and oversee the use of College Data by third party contactors.
    • 数据保管 — 数据保管s are responsible for overseeing the interpretation, implementation and compliance of policies, guidelines and access related to College Data. This role will typically be occupied by the same individual that serves as the 数据保管 for College record retention purposes.
    • 数据用户 — 数据用户s are responsible for complying with policies and guidelines established by the 数据所有者 when handling College Data. 例如, 将使用大学数据, stored and secured by the 数据用户 as set forth in the guidelines established by the 数据所有者 and overseen by the 数据保管.
    • 资讯科技保安主任 — The 资讯科技保安主任 is responsible for evaluating and reviewing cloud-based services and other proposed storage options for alignment with Data Classification standards and appropriate use.  The 资讯科技保安主任 is responsible for maintaining a list of third party contractors that store College Data and the related classification of such College Data.
  3. 高校数据的存储与安全: IS provides access to a number of options for storage of College Data by employees and third party contractors. Guidelines regarding appropriate storage locations for each College Data classification will be administered by IS. IS will be responsible for evaluating and reviewing cloud-based services and other proposed storage options for alignment with Data Classification guidelines. To ensure the College has access to College Data and the ability to mitigate the risk of loss or damage, College Data must be stored in locations owned, 由学院控制或许可, and not solely in personal storage or third party storage locations, except in limited approved circumstances.
  4. 异常: 异常 to this Operating Procedure may be approved by a vice president over IS.

 在保单办公室存档签名

总统

通过日期:10/13/2016
修正:04/18/2019