University of Connecticut

University Information Technolgy Services

ITPolicies

OFFICIAL STATE OF CONNECTICUT POLICIES
• Acceptable Use Policy
• Limits on the Use of State Telephones (Memorandum 85-39)
• Universal Website Accessibility Policy
UNIVERSITY OF CONNECTICUT POLICIES
• Access Control for Computing Resources and Equipment
• Contingency Planning
• Data Classification
• Data Security Training
• Device and Media Control
• Electronic Communication
• Electronic Data Integrity
• Electronic Data Security Management
• Electronic Privacy and Disclaimer Notice
• Electronic Workstation Use and Security
• Firewall
• Responding to Requests for University Information
• Individual Responsibilities with Respect to Appropriate Use of IT Resources
• Responsibilities for Maintaining Currency of Legal Obligations with Respect to University Data
• Policies of Individual Departments and Units
• Physical Network Access
• Roles and Responsibilities with Respect to University Data
• Security Incident Response
• Security Policy
• Security Requirements for Protecting University Data at Rest  ^05.01.2009
• Security Testing and Evaluation
• Social Security Number, Use of at UConn
• Systems of Record
• Third Party Access to IT Resources Policy
• UConnWeb Policy
• Universal Web Site Accessibility Policy
• Use of Official E-Mail Lists
• Wireless Access Policy
• Workforce Security - Access to Data
UNIVERSITY OF CONNECTICUT GUIDELINES / STANDARDS / RECOMMENDATIONS
• Electronic Data Transport Standard
• Fair Use of Copyrighted Works Guidelines
• Guidelines for Departmental/Unit Web Pages
• Guidelines for Managing E-Mail
• Individual Workstation Security Guidelines
• LAN Security Guidelines
• Laptop/Portable Computer Security Guidelines
• Office Procedures for Dealing with Confidential and Registered Confidential Data (Best Practices)
• Operational Procedures for Official E-Mail Lists
• Outlook eMail Security Guidelines
• Password Guidelines
• Physical Security Standards
• Security Standards
• Sensitive University Data Quick Reference Chart 
• Sensitive University Information Checklist
• Technical Standard for Data Backups
• Telecommunications Design Guide & Standards 
• Website Development and Design Standards
• UConn Wireless Security Standards Worksheet 
• UITS Standard - Copying University Data
OTHER DOCUMENTS
• Introduction to Information Security Awareness
  • View on-line
  • Download Powerpoint Presentation
• Procedure for Handling DMCA Complaints
• Template of first notification of complaint letter
• Template of second notification of complaint letter for faculty and staff
• Template of second notification of complaint letter for students
• Notice to Students Concerning RIAA Efforts - August 2007
• Procedures for locating and removing sensitive data stored on computer hard drives.
• Procedures for Removing (Wiping) Data from a Computer Prior to Re-Deployment Surplus or Disposal
• Privacy Notice Statement
• Risk Assessment and Business Continuity Plan Documents
• Security Risk Self-Assessment Process Instructions
• Inventory and Description template 
• IT Security Risk Assessment template 
• Business Continuity Plan template 
• Common Information Systems Assets reference document  
• Common Threats reference document 
• Common Vulnerabilities reference document 
• UITS Rules of Conduct with Respect to Confidential Information.
• UITS Procedures for Secure Shredding of Confidential Data - Sensitive Paper Documents.
SECURITY AND DATA ACCESS POLICIES AT A GLANCE
• Summary of Data Access policies (11-18-2004)
• Summary of Security policies (11-18-2004)

Updated: 05.05.2009:ldg