POLICY:
California State University, Northridge (CSUN) is responsible for taking all reasonable and appropriate steps for the protection of the confidentiality, availability, privacy, and integrity of information in its custody. This includes the physical security of the equipment where information is processed and maintained, and the preservation of information in case of intentional, accidental, or natural disaster. In addition, CSUN is responsible for the maintenance and currency of applications that use this information.
Enforcement of CSUN's Information Security Policies and compliance with Federal and State regulations regarding information technology is the responsibility of the President. Policy enforcement may be delegated to the Chief Information Officer (CIO). All CSUN Information Security Policies are to be reviewed on an ongoing basis by the Information Security Officer (ISO) for compliance with the CSU Information Security Policy and Federal and State regulations.
This policy applies to all students (see Student Records Administrative Policy, #RR650-30), faculty and staff, consultants, or any other persons having access to CSUN Information Technology. All unauthorized modifications, deletions, or disclosures of information included in CSUN data resources that compromise the integrity of CSUN's educational, scholarly, and administrative programs, violate individual privacy rights, or constitute a criminal act are expressly forbidden.
This policy is not limited to those systems and equipment operated and maintained by CSUN's central technology organization,
Information Technology (IT), but applies to all data systems and equipment on campus that contain private, confidential,
or mission critical data, including college and departmental level systems and equipment.
Colleges and administrative units must adhere to all CSU and CSUN Security Policies and have plans and procedures for the protection of their data centers and networks. These plans and procedures must insure business continuity, including protection against natural, accidental, or intentional disasters. The plans must include access control, password security, backup and off-site storage of mission critical data, and procedures for cost/effective security systems including virus scanners and firewalls that insure protection against known vulnerabilities.
RESPONSIBILITIES:
The Director of Information Technology, Chief Information Officer
FURTHER INFORMATION:
Chief Information Officer (hilary.baker@csun.edu)
Approved by the President
