Overview
The Office of Information Security establishes policies that comply with the University, state, and federal regulations. These policies address the requirement to protect information from disclosure, unauthorized access, loss/corruption of electronic and physical data. Along with well-documented best practices and procedures, the policies enable an organization to manage business risk through defined controls that provide a benchmark for audit and corrective action. Notable policies and best practices include:
- Computing Policies and Guidelines
- IT Security Policy(link is external)
- IT Security Standards(link is external)
- Policy on Acceptable Use of Electronic Resources(link is external)
- Policy on Unauthorized Copying of Copyrighted Media(link is external)
- Policy on Computer Disconnection from PennNet(link is external)