Information Technology Policies and Supporting Documentation
 

Index

I.  Statement on Information Technology Policies

II.  Policy Review Board

III. IT Policies

    1.  Responsible Use of Information Technology

     2.  Voice and Email Communication

          A.   Email as an Official Means of Communication with Students 
                 1. Guidelines for Email as an Official Means of Communication with Students
          B.   Broadcast Email Policy 
                 1. Broadcast Email Policy Procedures and Guidelines for Use
          C.   Broadcast Voicemail Policy
                 1. Broadcast Voicemail Policy Procedures and Guidelines for Use

     3.  Web and Network Policies

A.  Universal Web Accessibility

B. Connecting Devices to the University Network
     1. Standards for Connecting Devices to the University Network 
     2. Standards for Connecting Servers to the University Network 
     3. Infrastructure and Design Standards
     4. Network Equipment Standards
     5. Class B Domain Space Standards
     6. Wireless Standards                       

      4. Security and Privacy Policies

         A.  Internet Privacy Policy

         B.  Information Security Policy
              1.  Asset Classification Domain
              2.  Risk Assessment and Analysis Domain
              3.  Identity Management Domain
              4.  Access Control Domain
                   A.  Access to Electronic Records Held in Accounts Subsequent to Termination, Departure or Death Protocol
                         1.  FORM:  Request for Access to a University at Albany Personal Account Subsequent to
                               Termination, Departure, Transfer, or Death
                          2. Personal Account Access and Compliance Agreement
              5. Infrastructure Management Domain
                   A. Media Disposal, Destruction, and Redeployment Protocol
                         1.  NIST Guidelines for Media Sanitization (table)
                         2.  Sanitization Procedures
                         3.  OGS Memorandum from June, 2005
              6.  Software Assurance Domain
              7.  Incident Detection and Management Domain
              8.  Information Security Awareness Program Domain
              9. Oversight of Service Providers Domain
            10. Documentation Domain

 IV.  Operating Procedures

        A.  File Backup and Retention

        B.  Changes to Delivery of IT Equipment

        C.  Size Limits on Email Attachments 

        D.  Guidelines for using Skype on the University Network