Information Security

Mission Statement

The University of Wisconsin-Whitewater is committed to the development of the individual, the growth of personal and professional integrity and respect for diversity and global perspectives. These are met by providing academic and co-curricular programs that emphasize the pursuit of knowledge and understanding and a commitment to service within a safe and secure environment.

In support of this mission, the University of Wisconsin-Whitewater provides computing, networking, and information resources to the campus community of students, faculty, and staff.

Scope

The scope of this policy covers the security of University electronic information and the infrastructure upon which this information is processed, transmitted or stored.
University information is used for the business of the university, including teaching, research, student and administrative services.

Foundation / Philosophy Statement

Information security policies, procedures and guidelines should follow best practices and be patterned after published and accepted standards for management of information security (such as ISO/IEC 17799, Information Technology - Code of practice for information security management).

Statement of Policy and Procedures

Policy represents a set of guiding principles governed by the University of Wisconsin-Whitewater, the UW-System and guided by other appropriate professional organizations.
Procedure is a practical implementation of a policy developed by Information Technology Services (ITS), in support of UW-Whitewater's mission.
Guideline is a specific best practice that supports policy and procedure developed by Instructional, Communication and Information Technology (ITS), in support of UW-Whitewater's mission.

Appropriate and Reasonable Use

Appropriate and responsible use of UW-Whitewater electronic information is defined as use that is consistent with the teaching, learning, research and administrative objectives of the University. Appropriate use includes instruction, independent study, research, communications and official work of UW-Whitewater units, recognized student and campus organizations and agencies of the University.

Access to UW-Whitewater electronic information requires certain user responsibilities and obligations and is subject to University policies and local, state and federal laws. Appropriate use should always be legal and ethical, reflect academic honesty, show consideration and restraint in the consumption of shared resources, respect intellectual property, rights to privacy and to freedom from intimidation and harassment.

ITS Responsibilities

ITS has a responsibility to protect the confidentiality, integrity and availability of the information that resides within the University's technology environment. To that end ITS will maintain polices, procedures and guidelines that will ensure the security of the University's electronic information.

• Asset Classification Policy
• Data Custodianship Policy
• Information Outsourcing Policy
• Minimum Password Standards
• Network Guest Access Policy
• Social Security Number Policy & Guidelines