Policies & Standards

The Information Security Program Office (ISPO), under the guidance of the CISO, develops and maintains the CSCU Information Security Program.

Security Standards Policies

Security Standard

ISST 10.100 Risk Assessment (RA)

ISST 10.200 Awareness and Training (AT)

ISST 10.300 Incident Response (IR)

ISST 10.400 Access Control (AC)

ISST 10.500 Audit and Accountability (AU)

ISST 10.600 Security Assessment and Authorization (CA)

ISST 10.700 Configuration Management (CM)

ISST 10.800 Contingency Planning (CP)

ISST 10.900 Identification and Authentication (IA)

ISST 10.1000 Maintenance (MA)

ISST 10.1100 Media Protection (MP)

ISST 10.1200 Physical and Environmental Protection (PE)

ISST 10.1300 Planning (PL)

ISST 10.1400 Personnel Security (PS)

ISST 10.1500 System and Service Acquisition (SA)

ISST 10.1600 System and Communication Protection (SC)

ISST 10.1700 System and Information Integrity (SI)

POLICIES

Information security policies promote consistency, efficiency and effectiveness in delivering secure IT services in support of the CSCU educational mission. The policies contained here have been adopted and are to be applied to the system office and the colleges and universities that make up the Connecticut State Colleges and Universities System as governed by the Board of Regents.

Information Security Policy (pdf)