Sample Policies
Disposal of Computer Hard Drives
Sanitization of hard drives is the process of removing sensitive information from storage media in a manner that gives assurance that the information cannot be recovered by keyboard or laboratory ...
Written by: University of Arizona and added on Feb. 11, 2011Student E-mail Policy
There is an expanding reliance on electronic communication among students, faculty, staff, and administration at the University of Colorado at Boulder (CU-Boulder). This is motivated by the convenience, speed, cost-effectiveness, ...
Document added on June 27, 2011Web Publishing Policy
Personal web pages created by faculty, staff, or students are the sole responsibility of their authors. As a service and for informational purposes only, the university may provide lists of ...
Document added on April 1, 2011Policy on Instant Messaging
IM software may be used for direct communications between individual team members. For example it may be used for working on particular tasks, to clarify issues when working on collaborative ...
Document added on Feb. 19, 2011Server Security Policy
Defines standards for minimal security configuration for servers inside the organizationÂ’s production network, or used in a production capacity.
Document added on April 30, 2011VPN Security Policy
This sample VPN security policy defines the requirements for Remote Access IPSec or L2TP Virtual Private Network (VPN) connections to an organization's network. It is a MS Word document that ...
Document added on June 20, 2011Vulnerability Assessment Policy
The first step in securing anything is to first assess the risk. A Vulnerability Assessment is one aspect of an overall Risk Assessment that involves actively finding insecure systems. Do ...
Written by: Mitchell Rowton and added on June 25, 2011Risk Assessment Policy
Defines the requirements and provides the authority for the information security team to identify, assess, and remediate risks to the organizationÂ’s information infrastructure associated with conducti
Document added on May 22, 2011Policy on the Use of PennNet IP Address Space
This policy specifies the IP address registration requirements for devices connected to PennNet. It also provides "best practice" recommendations to guide local network administrators in the use of
Document added on April 4, 2011Policy on Unauthorized Copying of Copyrighted Media
This policy states the disciplinary sanctions for violation of copyrights
Document added on March 28, 2011