Technology Policies

The Georgetown University Information Security policies, supporting guidelines, and associated procedures have all been designed to adhere to the NIST Cyber Security Framework and its related Special Publications. UIS is charged with providing the tools and controls necessary to best ensure the confidentiality, integrity, availability, privacy and security of the University and all its assets and data.

100. General Security Policies

– HEOA DMCA Policy

– Information Security Policy

Computer Systems Acceptable Use Policy

200. System Security Policies

– IT Hardware Assets Mgt Policy
– Software Applications Mgt Policy
– Configuration Mgt Policy
– Vulnerability Mgt Policy
– Audit Logging Policy

300. Identity and Access Policies

– Elevated Privileges Mgt Policy

– Two-Factor Authentication

400. Data Security Policies

– Data Classification Guidelines
– Data Handling Guidelines
– Research Data Guidelines
– Security Risk Classifications for Data
– Report a Data Security Incident

500. IT Vendor Policies

– Technology Vendor Security Policy

600. Regulated Data Policies

– Using Zoom for Telehealth

– PCI Security
– HIPAA Security