Æðµã´«Ã½ is committed to protecting the confidentiality, integrity, and availability of information assets owned, leased, or entrusted to the University. Therefore, we hereby adopt both the California State University Information Security Policies and Standards and the Æðµã´«Ã½ Supplemental Information Security Policies.

Policies vs. Standards vs. Procedures

• Policies are formal statements created by the university that reflect our mission, which in this case is the protection of Æðµã´«Ã½'s information and assets.
• Standards are rules or actions that must be done to ensure our policies are being followed. They indicate expected behavior and must be enforced.
• Procedures are detailed step by step instructions on how to implement or adhere to the standards.
• Guidelines are recommended practices that are based on industry-standard practices.

CSU Information Security Policy and Standards

Policies and standards are organized in the following, clickable index:

Govern (GV)

Æðµã´«Ã½

Policy Section	Supplemental Policies	Standards	Procedures, Guidelines, Others
			Information Security Requirements - Supplemental Provisions

Identify (ID)

Æðµã´«Ã½

Policy Section	Supplemental Policies	Standards	Procedures, Guidelines, Others
	FERPA(Student Records) Privacy		Æðµã´«Ã½ Data Classification and Protection Standard Æðµã´«Ã½ Data Privacy Policy and Standards Æðµã´«Ã½ Campus Privacy Notice Æðµã´«Ã½ Data Security & Records Retention Æðµã´«Ã½ Data Reporting Governance Æðµã´«Ã½ Campus Device Standards Æðµã´«Ã½ Workstation Security Standards Æðµã´«Ã½ Common Workstation Standards Æðµã´«Ã½ High Risk Workstation Standards Æðµã´«Ã½ Student Device Standards Mobile Device Security Æðµã´«Ã½ Technology Procurement Request
			Æðµã´«Ã½ Data Classification and Protection Standard Æðµã´«Ã½ Vulnerability Management Standard Æðµã´«Ã½ Vulnerability Management Supplemental Standard for Workstations Æðµã´«Ã½ Vulnerability Exception Procedure Æðµã´«Ã½ Vulnerability Exception Request Form Æðµã´«Ã½ Quarantine Procedures

Protect (PR)

Æðµã´«Ã½

Policy Section	Supplemental Policies	Standards	Procedures, Guidelines, Others
			Æðµã´«Ã½ Access Control Standard – Identify Verification Æðµã´«Ã½ Access Control Standard – Authentication Æðµã´«Ã½ Level 1 Systems Access Review Template
			Æðµã´«Ã½ Data Classification and Protection Standard Æðµã´«Ã½ Vulnerability Management Standard Æðµã´«Ã½ Vulnerability Management Supplemental Standard for Workstations Æðµã´«Ã½ Vulnerability Exception Procedure Æðµã´«Ã½ Vulnerability Exception Request Form Æðµã´«Ã½ Quarantine Procedures

Detect (DE)

Æðµã´«Ã½

Policy Section	Supplemental Policies	Standards	Procedures, Guidelines, Others
			Æðµã´«Ã½ Vulnerability Management Standard Æðµã´«Ã½ Vulnerability Management Supplemental Standard for Workstations Æðµã´«Ã½ Vulnerability Exception Procedure Æðµã´«Ã½ Vulnerability Exception Request Form Æðµã´«Ã½ Quarantine Procedures Æðµã´«Ã½ Campus Web & Mobile Development Security Guideline

Respond (RS)

Æðµã´«Ã½

Policy Section	Supplemental Policies	Standards	Procedures, Guidelines, Others
			Æðµã´«Ã½ Data Classification and Protection Standard
			Æðµã´«Ã½ Data Classification and Protection Standard

Recover (RC)

Æðµã´«Ã½

Policy Section	Supplemental Policies	Standards	Procedures, Guidelines, Others