Information Technologies (IT)

Information Technologies (IT)

IT has the responsibility for maintaining Secure UD policy and its requirements based on the changing needs of the University and the changing nature of information security. IT provides tools and documentation and is available to assist units and individuals with understanding and implementing the Secure UD Data Governance & Security Program (Secure UD DGSP).

As a unit, IT is also responsible for complying with the Secure UD DGSP. Additionally, IT manages the University network and other central IT resources on behalf of the University community.

Responsibilities according to policy

IT's primary responsibilities include:

University Information Security Policy

  1. Maintaining overview responsibility for implementation of this policy.
  2. Establishing policy requirements, including security standards and controls, and monitoring and enforcing compliance.
    1. Developing a comprehensive security program that includes risk assessments, best practices, education, and training.
    2. (Having IT assume this responsibility does not abrogate the responsibility of individuals and units to comply with policy requirements.)
    3. Training and educating the University community on this policy.
    4. Monitoring technological developments, trends, and changes in laws and regulations and updating this policy as appropriate.
    5. Conducting annual reviews of minimum technical requirements and update this policy, with appropriate review.
    6. Assisting units in understanding risk and in identifying and implementing security controls to protect IT resources.
    7. Issuing critical security notices to unit heads.
    8. Developing, implementing, and maintaining University-level security monitoring and analysis.

    University Information Classification Policy

    1. In collaboration with data stewards, developing and maintaining a University data dictionary that describes the sets of University information available for access from data stewards' functional areas and the University information classifications assigned to them.