Purdue IT Policies

Purdue IT Policies Resnet Policies Data Classification and Handling Security Policy Exception Procedure Draft IT Policies
Standards Guidelines Best Practices

Other Compliance Activities

HIPAA Compliance Information GLBA/HIPAA Information Security Program Port Restriction Plan
SecurePurdue > IT Policies Hierarchy.

IT Policies Hierarchy.

The ITaP IT Networks and Security (ITNS) group facilitates the development of University information security policies and consults on information security compliance activities under federal, state, and local law.

This document details current University information security policy documents and the standards and guidelines related to each policy document. For more information about the information security policy process at Purdue, please visit: http://www.purdue.edu/securepurdue/bestPractices/draftITPolicies.cfm

Information Security Policy Document Definitions

Information Security Policy Documents Hierarchy

Delegation of Administrative Authority and Responsibility For Information Assurance, Security and Awareness (V.1.1)

Authentication and Authorization Policy (V.1.2)
Privacy for Electronic Information (V.1.3 Incident Response (V.1.4) Proper Disposal of Electronic Media (V.1.5) Interim Remote Access to IT Resources (V.1.6) Interim HIPAA Covered System and Application Logging (V.1.7) Interim Electronic Mail (V.3.1) IT Resource Acceptable Use Policy (V.4.1) Social Security Number Policy (V.5.1) Data Security and Access Policy (C-34) Policy for Purdue Pages on the World Wide Web (C-42) Dated: January 22, 2008