← Paul Test
doc13956 Information_Technology_Security_Policy.pdf
⬇ Export JSONBadge numbers are the reading order (depth-first). Nested children have dashed borders; grandchildren dotted. Hover a box for its type, text and attributes.
Page 1
15 item(s)
JSON
figure (2)
header (2)
heading (3)
text (7)
title (1)
1 · FIGURE
2 · HEADER
3 · HEADER
4 · FIGURE
5 · TEXT
6 · TEXT
7 · TEXT
8 · TEXT
9 · TITLE
10 · TEXT
11 · HEADING
12 · TEXT
13 · HEADING
14 · HEADING
15 · TEXT
Page 1 JSON
{
"document_id": 13956,
"page": 1,
"width_pt": 612,
"height_pt": 792,
"rotation": 0,
"pipeline_version": "paddleocr-vl-1.6+paul-48",
"engine": "paddleocr_vl",
"source_run_id": 14067,
"item_count": 15,
"counts_by_type": {
"figure": 2,
"header": 2,
"heading": 3,
"text": 7,
"title": 1
},
"build_ms": 1,
"items": [
{
"id": "p1.1",
"order": 1,
"type": "figure",
"bbox": {
"l": 256.56,
"t": 758.16,
"r": 354.24,
"b": 687.12
},
"text": "",
"attrs": {
"role": "page_header",
"block_label": "header_image"
}
},
{
"id": "p1.2",
"order": 2,
"type": "header",
"bbox": {
"l": 229.68,
"t": 680.16,
"r": 381.36,
"b": 650.64
},
"text": "KENTUCKY STATE UNIVERSITY",
"attrs": {
"block_label": "header"
},
"level": 2
},
{
"id": "p1.3",
"order": 3,
"type": "header",
"bbox": {
"l": 241.92,
"t": 644.64,
"r": 369.6,
"b": 631.2
},
"text": "Policies and Regulations",
"attrs": {
"block_label": "header"
},
"level": 2
},
{
"id": "p1.4",
"order": 4,
"type": "figure",
"bbox": {
"l": 232,
"t": 756,
"r": 379.56,
"b": 621.4
},
"text": "",
"attrs": {
"source": "pdf_image"
}
},
{
"id": "p1.5",
"order": 5,
"type": "text",
"bbox": {
"l": 33.6,
"t": 605.76,
"r": 226.08,
"b": 572.4
},
"text": "POLICY TITLE:\nInformation Technology Security"
},
{
"id": "p1.6",
"order": 6,
"type": "text",
"bbox": {
"l": 33.12,
"t": 555.12,
"r": 327.12,
"b": 521.52
},
"text": "APPLIES TO:\nAll users of KSU information technology resources"
},
{
"id": "p1.7",
"order": 7,
"type": "text",
"bbox": {
"l": 33.36,
"t": 504,
"r": 287.52,
"b": 452.4
},
"text": "ADMINISTRATIVE AUTHORITY:\nChief Information Officer (CIO)\nDepartment of Information Technology (IT)"
},
{
"id": "p1.8",
"order": 8,
"type": "text",
"bbox": {
"l": 33.36,
"t": 435.6,
"r": 289.44,
"b": 401.28
},
"text": "APPROVED BY:\nKentucky State University Board of Regents"
},
{
"id": "p1.9",
"order": 9,
"type": "title",
"bbox": {
"l": 33.6,
"t": 384,
"r": 133.2,
"b": 350.88
},
"text": "EFFECTIVE DATE: August 8, 2025",
"level": 2
},
{
"id": "p1.10",
"order": 10,
"type": "text",
"bbox": {
"l": 33.6,
"t": 332.4,
"r": 155.28,
"b": 299.76
},
"text": "NEXT REVIEW DATE:\nAugust 8, 2028"
},
{
"id": "p1.11",
"order": 11,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 283.68,
"r": 153.36,
"b": 269.28
},
"text": "POLICY STATEMENT:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p1.12",
"order": 12,
"type": "text",
"bbox": {
"l": 32.88,
"t": 250.8,
"r": 578.4,
"b": 171.36
},
"text": "This policy communicates the security measures required to ensure the appropriate protection and safeguarding of Kentucky State University's (KSU) Information Technology (IT) resources and systems from unauthorized access and misuse. KSU is committed to implementing security measures that ensure the confidentiality, integrity, and availability of its IT resources. Every user of KSU's IT resources bears responsibility for protecting these resources in compliance with this policy and all applicable laws."
},
{
"id": "p1.13",
"order": 13,
"type": "heading",
"bbox": {
"l": 34.08,
"t": 153.36,
"r": 115.92,
"b": 138.72
},
"text": "DEFINITIONS:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p1.14",
"order": 14,
"type": "heading",
"bbox": {
"l": 33.36,
"t": 120.96,
"r": 184.08,
"b": 107.52
},
"text": "Information Security Incident",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p1.15",
"order": 15,
"type": "text",
"bbox": {
"l": 33.12,
"t": 104.4,
"r": 577.44,
"b": 58.08
},
"text": "An actual or suspected event that adversely affects the security of KSU's information resources or systems. Examples include, but are not limited to: website defacement, theft or loss of a computing device containing PII, unauthorized access to data, a computer infected with malware, or a data breach."
}
],
"excluded_furniture": {
"first": [],
"last": []
}
}
Page 2
29 item(s)
JSON
heading (7)
list (3)
list_item (14)
text (5)
1 · HEADING
2 · TEXT
3 · HEADING
4 · TEXT
5 · HEADING
6 · HEADING
7 · TEXT
8 · LIST
9
10
11
12
13
14
15
16 · HEADING
17 · TEXT
18 · LIST
19
20
21 · HEADING
22 · TEXT
23 · HEADING
24 · LIST
25
26
27
28
29
Page 2 JSON
{
"document_id": 13956,
"page": 2,
"width_pt": 612,
"height_pt": 792,
"rotation": 0,
"pipeline_version": "paddleocr-vl-1.6+paul-48",
"engine": "paddleocr_vl",
"source_run_id": 14067,
"item_count": 29,
"counts_by_type": {
"heading": 7,
"list": 3,
"list_item": 14,
"text": 5
},
"build_ms": 3,
"items": [
{
"id": "p2.1",
"order": 1,
"type": "heading",
"bbox": {
"l": 33.36,
"t": 754.32,
"r": 223.92,
"b": 741.6
},
"text": "Information Technology (IT) Resource",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.2",
"order": 2,
"type": "text",
"bbox": {
"l": 33.36,
"t": 738.72,
"r": 577.92,
"b": 692.88
},
"text": "Any data, information, or system used by KSU. This includes all procedures, equipment, facilities, software, and data used to create, collect, process, store, or transmit information on any university-owned or managed platform."
},
{
"id": "p2.3",
"order": 3,
"type": "heading",
"bbox": {
"l": 33.12,
"t": 674.16,
"r": 234.48,
"b": 661.2
},
"text": "Personally Identifiable Information (PII)",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.4",
"order": 4,
"type": "text",
"bbox": {
"l": 32.88,
"t": 657.6,
"r": 577.68,
"b": 611.52
},
"text": "As defined by KRS 365.732, an individual's first name or first initial and last name, combined with any one or more of the following: Social Security number; driver's license number; or an account, credit, or debit card number in combination with any required security code or password."
},
{
"id": "p2.5",
"order": 5,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 592.8,
"r": 93.36,
"b": 578.88
},
"text": "PROCESS:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.6",
"order": 6,
"type": "heading",
"bbox": {
"l": 33.36,
"t": 561.6,
"r": 182.88,
"b": 548.4
},
"text": "Security Program Framework",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.7",
"order": 7,
"type": "text",
"bbox": {
"l": 33.36,
"t": 546.96,
"r": 577.2,
"b": 518.4
},
"text": "KSU will implement and maintain a comprehensive IT security program that addresses, at a minimum, the following areas, which are governed by their own specific policies, regulations, or procedures:"
},
{
"id": "p2.8",
"order": 8,
"type": "list",
"bbox": {
"l": 33.84,
"t": 504.46,
"r": 261.6,
"b": 397.92
},
"text": "",
"attrs": {
"item_count": 7
},
"children": [
{
"id": "p2.8.1",
"order": 9,
"type": "list_item",
"bbox": {
"l": 33.84,
"t": 504.46,
"r": 131.28,
"b": 489.808
},
"text": "Acceptable Use"
},
{
"id": "p2.8.2",
"order": 10,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 489.21,
"r": 171.6,
"b": 473.76
},
"text": "Awareness and Training"
},
{
"id": "p2.8.3",
"order": 11,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 473.96,
"r": 127.68,
"b": 459.308
},
"text": "Access Control",
"marker": "•"
},
{
"id": "p2.8.4",
"order": 12,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 458.71,
"r": 175.44,
"b": 443.76
},
"text": "Audit and Accountability",
"marker": "•"
},
{
"id": "p2.8.5",
"order": 13,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 443.44,
"r": 144.48,
"b": 428.788
},
"text": "Data Classification"
},
{
"id": "p2.8.6",
"order": 14,
"type": "list_item",
"bbox": {
"l": 33.84,
"t": 427.94,
"r": 261.6,
"b": 412.56
},
"text": "Business Continuity and Disaster Recovery"
},
{
"id": "p2.8.7",
"order": 15,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 412.69,
"r": 145.2,
"b": 397.92
},
"text": "Incident Response",
"marker": "•"
}
]
},
{
"id": "p2.9",
"order": 16,
"type": "heading",
"bbox": {
"l": 33.36,
"t": 381.36,
"r": 184.08,
"b": 368.4
},
"text": "Incident Reporting Procedure",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.10",
"order": 17,
"type": "text",
"bbox": {
"l": 33.12,
"t": 366.48,
"r": 577.44,
"b": 338.4
},
"text": "Any member of the KSU community who suspects or becomes aware of an Information Security Incident must report the incident immediately through one of the following channels:"
},
{
"id": "p2.11",
"order": 18,
"type": "list",
"bbox": {
"l": 33.6,
"t": 324.16,
"r": 577.92,
"b": 234.48
},
"text": "",
"attrs": {
"item_count": 2
},
"children": [
{
"id": "p2.11.1",
"order": 19,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 324.16,
"r": 577.68,
"b": 293.76
},
"text": "Contact the IT Help Desk or the Chief Information Officer (CIO) directly by phone (preferred), e-mail, or in person.",
"marker": "-"
},
{
"id": "p2.11.2",
"order": 20,
"type": "list_item",
"bbox": {
"l": 33.6,
"t": 279.64,
"r": 577.92,
"b": 234.48
},
"text": "Contact their department supervisor, who must then contact the CIO immediately. If the supervisor is unavailable, the individual must contact the appropriate divisional Vice President, who must then contact the CIO immediately."
}
]
},
{
"id": "p2.12",
"order": 21,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 218.64,
"r": 102.24,
"b": 206.16
},
"text": "Enforcement",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.13",
"order": 22,
"type": "text",
"bbox": {
"l": 33.12,
"t": 204.24,
"r": 578.16,
"b": 160.32
},
"text": "Any employee, student, or other individual who commits, or refuses to cooperate in the investigation of, a violation of this policy may be subject to disciplinary action, including but not limited to termination, loss of data-access privileges, administrative sanctions, and personal civil and criminal liability."
},
{
"id": "p2.14",
"order": 23,
"type": "heading",
"bbox": {
"l": 33.6,
"t": 145.2,
"r": 267.36,
"b": 130.8
},
"text": "REFERENCES AND RELATED MATERIALS:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.15",
"order": 24,
"type": "list",
"bbox": {
"l": 54.025,
"t": 109.76999999999998,
"r": 344.569,
"b": 36.75
},
"text": "",
"attrs": {
"item_count": 5
},
"children": [
{
"id": "p2.15.1",
"order": 25,
"type": "list_item",
"bbox": {
"l": 54.025,
"t": 109.76999999999998,
"r": 257.065,
"b": 97.76999999999998
},
"text": "KSU Appropriate Use of Technology Policy"
},
{
"id": "p2.15.2",
"order": 26,
"type": "list_item",
"bbox": {
"l": 54.025,
"t": 94.52499999999998,
"r": 344.569,
"b": 82.52499999999998
},
"text": "KSU Information Technology Audit and Accountability Policy"
},
{
"id": "p2.15.3",
"order": 27,
"type": "list_item",
"bbox": {
"l": 54.025,
"t": 79.27499999999998,
"r": 195.69,
"b": 67.27499999999998
},
"text": "KSU Data Classification Policy"
},
{
"id": "p2.15.4",
"order": 28,
"type": "list_item",
"bbox": {
"l": 54.025,
"t": 64.02499999999998,
"r": 235.393,
"b": 52.02499999999998
},
"text": "KSU Security and Management Policy"
},
{
"id": "p2.15.5",
"order": 29,
"type": "list_item",
"bbox": {
"l": 54.025,
"t": 48.75,
"r": 114.097,
"b": 36.75
},
"text": "KRS 365.732"
}
]
}
],
"excluded_furniture": {
"first": [],
"last": []
}
}
Page 3
12 item(s)
JSON
header (1)
heading (1)
link (1)
table (2)
table_cell (7)
1 · HEADER
2 · TABLE
3
4
5
6
7
8 · HEADING
9 · TABLE
10
11
12
Page 3 JSON
{
"document_id": 13956,
"page": 3,
"width_pt": 612,
"height_pt": 792,
"rotation": 0,
"pipeline_version": "paddleocr-vl-1.6+paul-48",
"engine": "paddleocr_vl",
"source_run_id": 14067,
"item_count": 12,
"counts_by_type": {
"header": 1,
"heading": 1,
"link": 1,
"table": 2,
"table_cell": 7
},
"build_ms": 1,
"items": [
{
"id": "p3.1",
"order": 1,
"type": "header",
"bbox": {
"l": 34.8,
"t": 739.92,
"r": 102.24,
"b": 726
},
"text": "CONTACTS:",
"attrs": {
"block_label": "figure_title"
},
"level": 2
},
{
"id": "p3.2",
"order": 2,
"type": "table",
"bbox": {
"l": 35.04,
"t": 724.8,
"r": 575.04,
"b": 693.12
},
"text": "",
"attrs": {
"block_label": "table",
"n_rows": 1,
"n_cols": 4,
"integrity": {
"cells_checked": 4,
"cells_flagged": 0
}
},
"children": [
{
"id": "p3.2.1",
"order": 3,
"type": "table_cell",
"bbox": {
"l": 41.775,
"t": 721.22,
"r": 131.463,
"b": 694.22
},
"text": "Subject\nGeneral Questions",
"attrs": {
"row": 0,
"col": 0,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.2.2",
"order": 4,
"type": "table_cell",
"bbox": {
"l": 190.08,
"t": 721.22,
"r": 270.708,
"b": 694.22
},
"text": "Office\nOffice of the CIO",
"attrs": {
"row": 0,
"col": 1,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.2.3",
"order": 5,
"type": "table_cell",
"bbox": {
"l": 328.38,
"t": 721.22,
"r": 402.724,
"b": 694.22
},
"text": "Telephone\n(502) 597-7000",
"attrs": {
"row": 0,
"col": 2,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.2.4",
"order": 6,
"type": "table_cell",
"bbox": {
"l": 439.17,
"t": 721.22,
"r": 553.914,
"b": 694.22
},
"text": "E-mail\nWendy.Dixie@kysu.edu",
"attrs": {
"row": 0,
"col": 3,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
},
"children": [
{
"id": "p3.2.4.1",
"order": 7,
"type": "link",
"bbox": {
"l": 436.65,
"t": 708.61,
"r": 555.81,
"b": 693.96
},
"text": "Wendy.Dixie@kysu.edu",
"attrs": {
"uri": "mailto:Wendy.Dixie@kysu.edu",
"action_type": "/URI",
"row": 0,
"col": 3,
"rowspan": 1,
"colspan": 1
}
}
]
}
]
},
{
"id": "p3.3",
"order": 8,
"type": "heading",
"bbox": {
"l": 34.56,
"t": 676.8,
"r": 89.76,
"b": 662.64
},
"text": "HISTORY:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p3.4",
"order": 9,
"type": "table",
"bbox": {
"l": 35.52,
"t": 647.04,
"r": 576.48,
"b": 582.96
},
"text": "",
"attrs": {
"block_label": "table",
"n_rows": 1,
"n_cols": 3,
"integrity": {
"cells_checked": 3,
"cells_flagged": 0
}
},
"children": [
{
"id": "p3.4.1",
"order": 10,
"type": "table_cell",
"bbox": {
"l": 41.775,
"t": 644.2,
"r": 199.476,
"b": 586.67
},
"text": "Revision Type\nIssued (New Policy)\nSubstantive Revisions\nMinor Revisions (New Template)",
"attrs": {
"row": 0,
"col": 0,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.4.2",
"order": 11,
"type": "table_cell",
"bbox": {
"l": 284.63,
"t": 644.2,
"r": 409.838,
"b": 586.67
},
"text": "Date of Issuance/Revision\nApril 2020\nDecember 18, 2023\nJune 2025",
"attrs": {
"row": 0,
"col": 1,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.4.3",
"order": 12,
"type": "table_cell",
"bbox": {
"l": 424.17,
"t": 644.2,
"r": 565.086,
"b": 586.67
},
"text": "Drafter(s)/Editor(s)\nUnknown\nWendy Dixie and Zach Atwell\nWendy Dixie and Zach Atwell",
"attrs": {
"row": 0,
"col": 2,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
}
]
}
],
"excluded_furniture": {
"first": [],
"last": []
}
}