Policies and Procedures

The Security and Disaster Recovery Department establishes the fundamental rules for all UTHSC-H information resources and their use. These policies and procedures are necessary to protect and maintain vital and confidential data.

POLICIES/STANDARD OPERATING PROCEDURES

>Acceptable Encryption Policy

>Access Control Policy

>Change Management Policy

>Exception Policy

>Host Configuration Policy

>Host Incident Handling and Response Policy

>Laptop Security Standard Operating Procedure

>Network Configuration Policy

>Network Security Policy

>Password Policy

>Physical Security

>Spam Policy

>Windows Server Directory Policy

>Wireless Network Security

PROCEDURES

>ASP and Vendor Hosted Information Security Checklist

>Enabling FileVault in Mac OS X

>Password Escrow Service

>Network Incident Handling Procedure

STANDARDS

>Firewall Zones

>PCI Security Standards

GUIDELINES

>Laptop Security Guidelines

FORMS

>Laptop Exception Request