Policies, Standards and Guides : IT Security : Texas State University

Relevant University Policies

Policy Number	Policy Title	Effective Date
UPPS 01.04.24	Policy on Copyrighted Computer Software	November 20, 2009
UPPS 04.01.01	Security of Texas State Information Resources	March 28, 2012
UPPS 04.01.02	Information Resources Identity and Access Management	February 3, 2012
UPPS 04.01.05	Network Use Policy	June 29, 2011
UPPS 04.01.07	Appropriate Use of Information Resources	February 3, 2012
UPPS 04.01.08	Texas State Internet Domain Name Policy	November 6, 2007
UPPS 04.01.09	Server Management Policy	June 30, 2010
UPPS 05.02.06	Acquisition of Information Technology Resources	December 14, 2012

University Standards and Guides

Data Classification Best Practices
Data Ownership Guide
Guide to Information and Systems Assets and Security Administrators
Server Management Technical and Security Standards and Procedures
Server Backup and Recovery Guide
Template Non-Disclosure and Confidentiality Agreements
Business Continuity Plan: Policy and Templates
University Data, Personal Data, & Remote Access
InCommon Federation: Participant Operational Practices
HIPAA Security Standards (Contact IT Security if you are a Texas State department and need assistant
with HIPAA)

State of Texas Standards and Guides

State of Texas Information Security Standards for Texas Public Institutions of Higher Education
Texas Administrative Code Chapter 202 (TAC 202)
Department of Information Resources
DIR Reading Room (Alerts & Patches, Security Tips, FAQs, Hoaxes, etc.)
DIR Policies, Standards, and Guidelines

National and International Standards and Guides

National Institute of Standards and Technology
Federal Agency Security Practices
NIST's Guide to General Server Security
SysAdmin, Audit, Network, Security Institute
SANS
Federal Information Security Management ACT
FISMA 800-53
ISO 20001
ISO.org
Sophos Best Practices

[Back to top]

Guides for Cloud Computing and Using non-Texas State Information Services

Texas State
    Checklist: Contracting for Information Technology Resources and Services (PDF)
    Texas State Data Services Contract Addendum (PDF)
    Texas State Data Services Contract Addendum (MS Word)

EDUCAUSE (see www.educause.edu)
7 Things You Should Know About Cloud Security
Other Data Protection Contractual Language Specific to Higher Education

University of Wisconsin-Madison
Guidelines for Use of Non-UW-Madison Applications and Services for Instruction
Guidelines for Use of Non-UW-Madison Applications and Services for Research

University of Indiana
Use of Cloud Computing

World Privacy Forum
Cloud Computing Privacy Tips
Privacy in the Clouds: Risks to Privacy and Confidentiality from Cloud Computing

[Back to top]

Informational Brochures

IT Security has created a number of informative brochures that are easy to download and/or print. These may be used for personal information, or departments may wish to print and distribute at orientations or other meetings.

If you need additional information, please contact IT Security at 245.4225, or by e-mail at itsecurity@txstate.edu.