Data Security Advisory Committee (DSAC)

The Data Security Advisory Committee (DSAC) is the University council responsible for coordinating information security and risk management efforts and monitoring and recommending necessary security actions to the University.

The DSAC includes:

• The director of IT Security (chair)
• Other members as appointed by data trustees or the chair.

Responsibilities according to policy

The DSAC's primary data governance and information security responsibilities include:

University Data Management and Governance Policy

1. Assisting the CDG and data stewards in the implementation the risk management aspects of this policy.
2. Assisting data stewards in coordinating initiatives to improve the confidentiality, integrity, and availability of University information across the University.
3. Aiding in the development of standards and guidelines concerning the management of information security and risk by the University and its units.
4. Reporting to the CDG relevant security initiatives and recommendations as appropriate.

University Information Security Policy

1. Assisting in the implementation of this policy.
2. In consultation with the VP & General Counsel, monitoring federal, state, and local laws affecting information security and privacy.
3. Staying abreast of evolving best practices in information security and privacy in higher education.
4. Assessing risks to University information and recommending updates to this policy, including the Secure UD Data Governance & Security Program, as necessary.