Technology Policies

The Georgetown University Information Security policies, supporting guidelines, and associated procedures have all been designed to adhere to the NIST Cyber Security Framework and its related Special Publications. UIS is charged with providing the tools and controls necessary to best ensure the confidentiality, integrity, availability, privacy and security of the University and all its assets and data.

100. General Security Policies

Technology Acceptable Use
HEOA DMCA Policy
Information Security Policy

200. System Security Policies

IT Hardware Assets Mgt Policy
Software Applications Mgt Policy
Configuration Mgt Policy
Vulnerability Mgt Policy
Audit Logging Policy

300. Identity and Access Policies

Elevated Privileges Mgt Policy

Two-Factor Authentication

400. Data Security Policies

Data Classification Guidelines
Data Handling Guidelines
Research Data Guidelines
Security Risk Classifications for Data
Report a Data Security Incident

500. IT Vendor Policies

Technology Vendor Security Policy

600. Regulated Data Policies

PCI Security
HIPAA Security