5.23 Security and Privacy of Information Resources

Responsible Position

Chief Information Officer

RELATED ITEMS

Minnesota State Board Policy

External Website: Minnesota State - 5.22 Acceptable Use of Computers and Information Technology Resources
External Website: Minnesota State - 5.23 Security and Privacy of Information Resources

Minnesota State System Procedure

Minnesota Statutes Chapter 13, Minnesota Government Data Practices Act

POLICY STATEMENT

Policy

Alexandria Technical and Community College (ATCC) is committed to protect the security and privacy of its information resources and to make information accessible to fulfill its mission of providing high quality technical and transfer education. ATCC shall maintain the confidentiality, integrity and availability of information resources; ensure continuity of operations; prevent, control and minimize the impact of security incidents; and manage risks to those resources regardless of the storage medium, transmission, or disposal methods. ATCC has adopted and implemented privacy and security policies, procedures, plans, programs, and training for its information resources consistent with applicable Minnesota State Board policy, procedures, and other applicable standards, as well as state and federal law.

All users of Alexandria Technical and Community College or Minnesota State System information resources are responsible for the privacy, security, and appropriate use of those resources over which they have authority, access, or control, and for compliance with applicable laws, regulations, policies, procedures, and other standards. ATCC provides appropriate security awareness resources for its users.

Applicability

This policy applies to all users of Alexandria Technical and Community College or Minnesota State System information resources; and to all system information resources in any form or storage media, wherever located.

Definitions

Access: Access means the authority to view information, and when appropriate, insert, update, delete, or download information. Access shall be authorized to individuals or groups of users depending on the application of law or System policy or procedure. Technical ability to access information is not necessarily equivalent to legal authority.

Information Resources: Information resources means all data collected, created, received, maintained or disseminated by Alexandria Technical & Community College and any Minnesota State user, regardless of its form, storage media or conditions of use.

System: System, or Minnesota State System, means the Board of Trustees, the System office, the state colleges and universities, and any part or combination thereof.

User: User means any individual, including but not limited to, students, administrators, faculty, other employees, volunteers and other authorized individuals using System information resources, whether or not the user is affiliated with Minnesota State.

Integrity: Integrity means assuring that information is kept intact, and not lost, damaged or modified.

Availability: Availability means assuring that information is accessible to authorized users when needed.

Confidentiality: Confidentiality means assuring that information is accessible only as authorized.

Scope

Procedures

ATCC adopted and maintains security and privacy procedures under this policy.

Sanctions

Users who violate this policy or related system or college procedures shall be subject to disciplinary action through appropriate channels. Violations may be referred to appropriate law enforcement authorities.

Browser version not supported

redirecting...

POLICIES & PROCEDURES