| Acceptable Use |
Defines requirements for interactive logon messages on University systems, including standard notification language, use of a shortened message when necessary, and system owner responsibilities. |
UTS Standard: Interactive Logon Message |
| Admin by Request |
Specifies requirements and approval criteria for temporary administrator privileges, including Admin by Request (AbR), least-privilege principles, approved and prohibited use cases, and oversight responsibilities. |
UTS Standard: Temporary Administrator Privileges |
| Artificial Intelligence Usage (Guideline) |
Establishes guidelines for the use of artificial intelligence (AI) across the University, including data protection, human oversight, governance, compliance, and acceptable use in academic and administrative activities. |
UTS Guideline: Artificial Intelligence Usage |
| Authentication and Access Control |
Specifies requirements for securely authenticating users and managing access to IT resources and University data through appropriate credentials, authorization controls, and multi-factor authentication. |
UTS Standard: Authentication and Access Control |
| Cybersecurity Incident Response |
Provides requirements for identifying, reporting, containing, resolving, and recovering from cybersecurity incidents while minimizing harm. |
UTS Standard: IT Cybersecurity Incident Response |
| Data Classification |
Outlines the data classification framework, including sensitivity levels, protection requirements, and responsibilities for safeguarding University information. |
UTS Standard: Data Classification |
| Internet Domain Name |
Defines requirements for acquiring, managing, securing, and retiring domain names to ensure consistent branding, proper oversight, and protection against domain-related security risks. |
UTS Standard: Internet Domain Name |
| Logging and Management |
Specifies requirements for generating, protecting, retaining, and reviewing IT logs to support security monitoring, incident response, troubleshooting, and regulatory compliance. |
UTS Standard: IT Logging and Management |
| Network Security |
Outlines requirements for securing, managing, monitoring, and controlling access to network infrastructure to protect the confidentiality, integrity, and availability of University resources. |
UTS Standard: Network Security |
| Password |
Defines the requirements for creating, managing, and protecting passwords (as well as other authentication credentials) to prevent unauthorized access and safeguard University systems. |
UTS Standard: Oakland Passwords |
| PCI Security |
Establishes the University’s requirements for securely processing, storing, and transmitting payment card data in compliance with PCI DSS, including approved payment processing models, security controls, and responsibilities. |
UTS Standard: PCI Security |
| Programming |
Defines the University’s requirements for developing, testing, managing, and maintaining secure, reliable, and supportable code that interacts with University resources or data. |
UTS Standard: Programming |
| Terminology |
Provides standardized definitions for information security, technology, and governance terms to promote consistency and a shared understanding across University policies, standards, guidelines, and related documentation. |
UTS Standard: IT Terminology |