The following list provides some of the objectives of information security at Colorado College. Information security is critical to the interests of the college and the many constituencies it serves. The President of the College delegates administration of the college’s Information Security Policy to the Chief Technology Officer/Vice President for Information Technology. This policy establishes the general principles of information security that will be applied throughout the college.Īuthorities Delegated and Retained/Administrative Responsibility Furthermore, the college recognizes its responsibility to promote security awareness among the members of the Colorado College community. Failure to protect the college’s information technology assets could have financial, legal, and ethical ramifications.Ĭolorado College acknowledges its obligation to ensure appropriate security for information systems in its domain of ownership and control. State and federal statutes, rules, and regulations, college policies and other explicit agreements also mandate the security of information and information systems. Safeguarding information and information systems is essential to preserving the ability of the college to perform its mission and meet its responsibilities to students, faculty, staff, and the citizens whom it serves. Today, information technology (IT) permeates all aspects of teaching, learning, research, outreach and the business and facilities functions of the college. This includes all networked devices, including but not limited to personal digital assistants, cell phones, personal computers, workstations, minicomputers, other wireless devices such as iPads, and any associated peripherals and software, regardless of whether used for administration, research, teaching or other purposes. It applies to all computer and communication facilities owned, leased, operated, or contracted by the college. This policy refers to all college information resources whether individually controlled or shared, stand-alone or networked. Every user of Colorado College’s information resources has a general responsibility to protect those assets, while some offices and individuals have specific responsibilities. This policy is applicable to all students, faculty, and staff and to all others granted use of Colorado College information resources. The purpose of this policy is to ensure the protection of Colorado College’s information resources from accidental or intentional access or damage while also preserving and nurturing the open, information-sharing requirements of its academic culture.

Example security policy