IT System Security and Access Policy, 208.5

The IT System Security and Access Policy, 208.5, was approved by Chancellor Christina Drale on October 21, 2020. This policy complies with federal and state laws and regulations, related standards, and security frameworks. This policy partially or fully complies with PCI, ISO-27001, HIPAA, Arkansas Freedom of Information Act, FERPA, and NIST Cyber Security Framework. This policy applies to University-owned IT Systems and University-contracted systems and services, and privately-owned or publicly-provided devices using the University’s networks and resources to protect the confidentiality, integrity, and availability of information.