An Acceptable Use Policy (AUP) is a strategic compliance tool that protects people, data, and systems while setting clear expectations for technology use. A well-crafted AUP turns subjective norms ...

Let's face it, even the most security-aware employees will have a lapse every now and then. Or maybe your company security policy isn't all it can be, and your employees are doing the minimum because ...

The objective of Brandeis University (“University”) in the development and implementation of this comprehensive written information security policy (“WISP”) is to create effective administrative, ...

C.ISO Domain 7: Human Resource Information Policy Sacramento State Data Classification and Protection Standard K. ISO Domain 15: Supplier Relationships Policy General Provisions for Information ...

This Policy serves as a foundation for the University’s data security practices and is consistent with the University’s data and records management standards. The University recognizes that the value ...

The purpose of this policy is to provide a security framework that will ensure the protection of University Information from Unauthorized Access, loss, or damage while supporting the open ...

When was the last time your job dealt you a good kick in the teeth? If you’re an IT security professional, you probably remember. When it’s your job to define the boundary between users and the perils ...

The University at Buffalo Information Technology Office (UBIT)’s Information Security Program addresses the full range of information security issues that affect the university, and establishes a ...

Archimedes famously said the quickest route between two points is a straight line. He meant geometry, though I argue this concept applies seamlessly to data security. To secure data in enterprise ...

Information security, sometimes abbreviated to infosec, is a set of practices intended to keep data secure from unauthorized access or alterations, both when it’s being stored and when it’s being ...