Understanding University Information Security Policies

Overview

The University's policies and procedures are linked below, and posted on the University Policy and Procedures webpage.

• University of Pittsburgh policy AO 11 (formerly 10-02-04) Computer Data Administration describes how only authorized computer users may access sensitive information, and how departments must designate “data owners” responsible for determining who should have this access.
• University of Pittsburgh policy AO 35 (formerly 10-02-06) University Administrative Computer Data (UACD) Security & Privacy provides guidance on security controls needed to protect University administrative computer data. This includes but is not limited to employee personnel records, student educational records, financial data, and electronic documents, as well as emails used for administrative purposes.
• University of Pittsburgh policy RI 07 Research Integrity (formerly 11-01-01)