Information Security Policies and Standards site. Click the "Standards History" on left menu to view current Information Security Policies and Standards.

Wendy Wilde, CISSP, CISM, MSIT, | Information Security Officer & GLBA Program Officer

757-594-0704 | wendy.wilde@cnu.edu

Karl Anderson, CISSP, MSIT, | Information Security Analyst

757-594-0708 | karl.anderson@cnu.edu

2024 Security Awareness Training Due December 31. 2024:

Christopher Newport Information Security Policies and Standards

GROUP	TYPE	NAME	RESPONSIBLE	LAST UPDATE/REVIEW
VITA	POLICY	VITA SEC-530 Information Security Standard	VITA	September 2023
VITA	POLICY	VITA SEC-520 Risk Management Standard	VITA	December 2021
VITA	POLICY	VITA SEC-527 Security Awareness Training Standard	VITA	December 2022
ACCOUNT MANAGEMENT	STANDARD	Account Management Standard	INFORMATION SECURITY	June 2024
ACCOUNT MANAGEMENT	STANDARD	University Password Standard	INFORMATION SECURITY	June 2024
ACCOUNT MANAGEMENT	GUIDELINE	Local Administrative Privileges	INFORMATION SECURITY	June 2024
ACCOUNT MANAGEMENT	PROCEDURE	Account Management	INFORMATION SECURITY	June 2024
ACCOUNT MANAGEMENT	PROCEDURE	VPN Account Management	INFORMATION SECURITY	June 2024
ACCOUNT MANAGEMENT	PROCEDURE	Firewall Account Management	INFRASTRUCTURE	June 2024
ACCOUNT MANAGEMENT	PROCEDURE	Banner Account Management	SYSTEMS & DATABASE OPERATIONS	June 2023
DATA GOVERNANCE	STANDARD	Data Access Standard	INFORMATION SECURITY	June 2024
DATA GOVERNANCE	STANDARD	Data Classification Standard	INFORMATION SECURITY	June 2024
DATA GOVERNANCE	STANDARD	Data Protection Standard	INFORMATION SECURITY	June 2024
DISASTER RECOVERY	STANDARD	ITS Disaster Recovery Plan (DRP)	ITS LEADERSHIP	June 2024
DISASTER RECOVERY	PROCEDURE	Banner Disaster Recovery	SYSTEMS & DATABASE OPERATIONS	June 2024
ENTERPRISE SERVICES	STANDARD	Software Development Standard & Roadmap	ENTERPRISE SERVICES	January 2023
GLBA	STANDARD	GLBA Information Security Program	INFORMATION SECURITY	June 2024
INCIDENT RESPONSE	STANDARD	Security Incident Response Plan	ITS LEADERSHIP	June 2024
INCIDENT RESPONSE	PROCEDURE	Security Incident Response Plan Guidelines & Procedures	ITS LEADERSHIP	June 2024
NETWORK	STANDARD	Network Firewall Standard	INFRASTRUCTURE	June 2024
NETWORK	STANDARD	Remote Access & VPN Standard	INFRASTRUCTURE	June 2024
POLICIES	POLICY	6010 Acceptable Use of Computing Resources	ITS LEADERSHIP	July 2024
POLICIES	POLICY	6015 Unified Data Policy	ITS LEADERSHIP	July 2024
POLICIES	POLICY	6035 Information Technology Change Management	ITS LEADERSHIP	July 2024
POLICIES	POLICY	6040 Remote Access & Virtual Private Network Policy	ITS LEADERSHIP	July 2024
POLICIES	POLICY	6045 Information Security Policy	ITS LEADERSHIP	July 2024
RISK MANAGEMENT	STANDARD	Risk Assessment Standard	INFORMATION SECURITY	June 2024
RISK MANAGEMENT	STANDARD	Third Party Vendor Risk Management Standard	INFORMATION SECURITY	June 2024
RISK MANAGEMENT	STANDARD	Business Continuity Plan (BCP)	INFORMATION SECURITY	DRAFT
RISK MANAGEMENT	PROCEDURE	Risk Assessment Guidelines & Procedures	INFORMATION SECURITY	June 2024
RISK MANAGEMENT	POLICY	Third Party Vendor Risk Mangement Procedures	INFORMATION SECURITY	June 2024
SYSTEMS & DESKTOP	STANDARD	Systems Monitoring & Logging Standard	INFORMATION SECURITY	June 2024
SYSTEMS & DESKTOP	STANDARD	Systems & Software Patching Standard	INFORMATION SECURITY	June 2024
SYSTEMS & DESKTOP	STANDARD	Vulnerability Assessment & Management Standard	INFORMATION SECURITY	June 2024
SYSTEMS & DESKTOP	STANDARD	Encryption Standard	INFORMATION SECURITY	June 2024
SYSTEMS & DESKTOP	GUIDELINE	ITS Systems & Application Hardening Guidelines	SYSTEMS & DATABASE OPERATIONS	March 2020
SYSTEMS & DESKTOP	PROCEDURE	ITS System Logging Procedures	SYSTEMS & DATABASE OPERATIONS	February 2023
TRAINING	STANDARD	Security Awareness Training Standard	INFORMATION SECURITY	June 2024
TRAINING	STANDARD	Role Based Security Training Standard	INFORMATION SECURITY	June 2024

Browser not supported