{ "document_id": 14004, "filename": "Data_Security_Controls_Regulation.pdf", "engine": "paddleocr_vl", "source_run_id": 14114, "generated_at": "2026-11-03T22:42:48+00:00", "page_count": 2, "counts_by_type": { "figure": 2, "header": 2, "heading": 15, "link": 1, "list": 3, "list_item": 11, "table": 2, "table_cell": 7, "text": 5, "title": 1 }, "timings": { "total_ms": 383, "structure_ms": 160, "text_layer_ms": 13, "build_ms": 4 }, "pages": [ { "document_id": 14004, "page": 1, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14114, "item_count": 20, "counts_by_type": { "figure": 2, "header": 2, "heading": 10, "text": 5, "title": 1 }, "build_ms": 1, "items": [ { "id": "p1.1", "order": 1, "type": "figure", "bbox": { "l": 256.8, "t": 758.16, "r": 354.24, "b": 687.12 }, "text": "", "attrs": { "role": "page_header", "block_label": "header_image" }, "reading_order": 0 }, { "id": "p1.2", "order": 2, "type": "header", "bbox": { "l": 229.68, "t": 680.16, "r": 381.36, "b": 650.64 }, "text": "KENTUCKY STATE UNIVERSITY", "attrs": { "block_label": "header" }, "level": 2, "reading_order": 1 }, { "id": "p1.3", "order": 3, "type": "header", "bbox": { "l": 242.16, "t": 644.64, "r": 369.6, "b": 631.2 }, "text": "Policies and Regulations", "attrs": { "block_label": "header" }, "level": 2, "reading_order": 2 }, { "id": "p1.4", "order": 4, "type": "figure", "bbox": { "l": 232, "t": 756, "r": 379.56, "b": 621.4 }, "text": "", "attrs": { "source": "pdf_image" }, "reading_order": 3 }, { "id": "p1.5", "order": 5, "type": "title", "bbox": { "l": 34.08, "t": 606, "r": 167.52, "b": 572.88 }, "text": "REGULATION TITLE: Data Security Controls", "level": 2, "reading_order": 4 }, { "id": "p1.6", "order": 6, "type": "text", "bbox": { "l": 33.36, "t": 554.64, "r": 325.92, "b": 521.52 }, "text": "APPLIES TO:\nAll users of KSU information technology resources", "reading_order": 5 }, { "id": "p1.7", "order": 7, "type": "text", "bbox": { "l": 33.36, "t": 504, "r": 265.68, "b": 452.4 }, "text": "ADMINISTRATIVE AUTHORITY:\nChief Information Officer (CIO)\nDepartment of Information Technology", "reading_order": 6 }, { "id": "p1.8", "order": 8, "type": "heading", "bbox": { "l": 34.32, "t": 435.36, "r": 123.36, "b": 420.96 }, "text": "APPROVED BY:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 7 }, { "id": "p1.9", "order": 9, "type": "text", "bbox": { "l": 33.84, "t": 417.6, "r": 289.68, "b": 401.76 }, "text": "Kentucky State University Board of Regents", "reading_order": 8 }, { "id": "p1.10", "order": 10, "type": "heading", "bbox": { "l": 34.32, "t": 384.24, "r": 133.92, "b": 369.84 }, "text": "EFFECTIVE DATE:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 9 }, { "id": "p1.11", "order": 11, "type": "heading", "bbox": { "l": 34.32, "t": 366.24, "r": 123.6, "b": 351.12 }, "text": "August 8, 2025", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 10 }, { "id": "p1.12", "order": 12, "type": "heading", "bbox": { "l": 34.08, "t": 332.64, "r": 154.8, "b": 318.24 }, "text": "NEXT REVIEW DATE:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 11 }, { "id": "p1.13", "order": 13, "type": "heading", "bbox": { "l": 34.32, "t": 315.36, "r": 124.08, "b": 300 }, "text": "August 8, 2028", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 12 }, { "id": "p1.14", "order": 14, "type": "heading", "bbox": { "l": 34.08, "t": 283.92, "r": 187.2, "b": 269.04 }, "text": "REGULATION STATEMENT:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 13 }, { "id": "p1.15", "order": 15, "type": "text", "bbox": { "l": 33.6, "t": 251.04, "r": 577.44, "b": 220.32 }, "text": "This regulation implements the Data Security and Management Policy by establishing the specific, mandatory technical controls required to protect university data and information systems.", "reading_order": 14 }, { "id": "p1.16", "order": 16, "type": "heading", "bbox": { "l": 34.32, "t": 201.84, "r": 115.68, "b": 187.44 }, "text": "DEFINITIONS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 15 }, { "id": "p1.17", "order": 17, "type": "heading", "bbox": { "l": 34.08, "t": 169.44, "r": 234.24, "b": 155.52 }, "text": "Personally Identifiable Information (PII)", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 16 }, { "id": "p1.18", "order": 18, "type": "text", "bbox": { "l": 34.08, "t": 152.88, "r": 577.68, "b": 122.88 }, "text": "Sensitive information that can be used to identify an individual, such as Social Security number, date of birth, and driver's license number.", "reading_order": 17 }, { "id": "p1.19", "order": 19, "type": "heading", "bbox": { "l": 33.84, "t": 104.4, "r": 92.88, "b": 90 }, "text": "PROCESS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 18 }, { "id": "p1.20", "order": 20, "type": "heading", "bbox": { "l": 34.08, "t": 72.96, "r": 128.16, "b": 59.52 }, "text": "Password Security", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 19 } ] }, { "document_id": 14004, "page": 2, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14114, "item_count": 29, "counts_by_type": { "heading": 5, "link": 1, "list": 3, "list_item": 11, "table": 2, "table_cell": 7 }, "build_ms": 3, "items": [ { "id": "p2.1", "order": 1, "type": "list", "bbox": { "l": 33.6, "t": 756.03, "r": 578.16, "b": 665.28 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p2.1.1", "order": 2, "type": "list_item", "bbox": { "l": 33.6, "t": 756.03, "r": 441.12, "b": 740.4 }, "text": "Passwords must be treated as confidential information and must not be shared.", "reading_order": 0 }, { "id": "p2.1.2", "order": 3, "type": "list_item", "bbox": { "l": 33.6, "t": 726.03, "r": 364.08, "b": 710.16 }, "text": "Network passwords are required to be changed every 180 days.", "reading_order": 1 }, { "id": "p2.1.3", "order": 4, "type": "list_item", "bbox": { "l": 34.08, "t": 696.28, "r": 578.16, "b": 665.28 }, "text": "All password resets are performed by the Information Technology (IT) Help Desk or online. Users must provide proof of identity (e.g., KSU ID number) before a password will be reset.", "marker": "-", "reading_order": 2 } ], "reading_order": 0 }, { "id": "p2.2", "order": 5, "type": "heading", "bbox": { "l": 33.6, "t": 650.4, "r": 199.44, "b": 636.96 }, "text": "Workstation and Device Security", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 1 }, { "id": "p2.3", "order": 6, "type": "list", "bbox": { "l": 34.32, "t": 622.26, "r": 578.16, "b": 532.8 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p2.3.1", "order": 7, "type": "list_item", "bbox": { "l": 34.32, "t": 622.26, "r": 578.16, "b": 591.36 }, "text": "Password-protected screen savers are mandated on all university-owned computers and must be set to a maximum timeout of 15 minutes.", "reading_order": 0 }, { "id": "p2.3.2", "order": 8, "type": "list_item", "bbox": { "l": 34.32, "t": 577.73, "r": 578.16, "b": 532.8 }, "text": "All KSU information must be stored on university servers, network storage devices, or university-approved cloud storage. Storing KSU information on local PC drives (C: drive), USB drives, CDs/DVD, or other portable devices is prohibited.", "marker": "-", "reading_order": 1 } ], "reading_order": 2 }, { "id": "p2.4", "order": 9, "type": "heading", "bbox": { "l": 34.08, "t": 516.72, "r": 91.2, "b": 503.52 }, "text": "Encryption", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 3 }, { "id": "p2.5", "order": 10, "type": "list", "bbox": { "l": 33.36, "t": 489.21, "r": 577.92, "b": 324 }, "text": "", "attrs": { "item_count": 5 }, "children": [ { "id": "p2.5.1", "order": 11, "type": "list_item", "bbox": { "l": 33.84, "t": 489.21, "r": 577.92, "b": 458.88 }, "text": "All files containing Personally Identifiable Information (PII) must be encrypted. Instructions for encrypting Microsoft Office documents are to use the \"Protect Document\" feature under the \"File\" menu.", "marker": "-", "reading_order": 0 }, { "id": "p2.5.2", "order": 12, "type": "list_item", "bbox": { "l": 33.36, "t": 444.44, "r": 464.88, "b": 429.12 }, "text": "Applications that do not have encryption capabilities must not be used to handle PII.", "reading_order": 1 }, { "id": "p2.5.3", "order": 13, "type": "list_item", "bbox": { "l": 33.84, "t": 414.44, "r": 265.68, "b": 398.64 }, "text": "PII is not permitted in the body of an email.", "reading_order": 2 }, { "id": "p2.5.4", "order": 14, "type": "list_item", "bbox": { "l": 33.84, "t": 384.69, "r": 577.2, "b": 354 }, "text": "Encrypted files containing PII may be sent via email, but the email must not contain the encryption key or password. The key may be communicated over the phone or in a separate email.", "marker": "•", "reading_order": 3 }, { "id": "p2.5.5", "order": 15, "type": "list_item", "bbox": { "l": 33.6, "t": 339.91, "r": 234.96, "b": 324 }, "text": "All backups of PII must be encrypted.", "marker": "•", "reading_order": 4 } ], "reading_order": 4 }, { "id": "p2.6", "order": 16, "type": "heading", "bbox": { "l": 34.08, "t": 308.64, "r": 267.12, "b": 293.76 }, "text": "REFERENCES AND RELATED MATERIALS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 5 }, { "id": "p2.7", "order": 17, "type": "list_item", "bbox": { "l": 33.84, "t": 278.39, "r": 240.48, "b": 262.32 }, "text": "Data Security and Management Policy", "reading_order": 6 }, { "id": "p2.8", "order": 18, "type": "heading", "bbox": { "l": 34.56, "t": 246.96, "r": 102.48, "b": 232.56 }, "text": "CONTACTS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 7 }, { "id": "p2.9", "order": 19, "type": "table", "bbox": { "l": 34.8, "t": 217.44, "r": 575.76, "b": 185.28 }, "text": "", "attrs": { "block_label": "table", "n_rows": 1, "n_cols": 4, "integrity": { "cells_checked": 4, "cells_flagged": 0 } }, "children": [ { "id": "p2.9.1", "order": 20, "type": "table_cell", "bbox": { "l": 41.775, "t": 213.57000000000005, "r": 131.463, "b": 186.54999999999995 }, "text": "Subject\nGeneral Questions", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p2.9.2", "order": 21, "type": "table_cell", "bbox": { "l": 190.08, "t": 213.57000000000005, "r": 270.708, "b": 186.54999999999995 }, "text": "Office\nOffice of the CIO", "attrs": { "row": 0, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 1 }, { "id": "p2.9.3", "order": 22, "type": "table_cell", "bbox": { "l": 328.38, "t": 213.57000000000005, "r": 402.724, "b": 186.54999999999995 }, "text": "Telephone\n(502) 597-7000", "attrs": { "row": 0, "col": 2, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 2 }, { "id": "p2.9.4", "order": 23, "type": "table_cell", "bbox": { "l": 439.17, "t": 213.57000000000005, "r": 553.914, "b": 186.54999999999995 }, "text": "E-mail\nWendy.Dixie@kysu.edu", "attrs": { "row": 0, "col": 3, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "children": [ { "id": "p2.9.4.1", "order": 24, "type": "link", "bbox": { "l": 436.65, "t": 201.1, "r": 555.81, "b": 186.45 }, "text": "Wendy.Dixie@kysu.edu", "attrs": { "uri": "mailto:Wendy.Dixie@kysu.edu", "action_type": "/URI", "row": 0, "col": 3, "rowspan": 1, "colspan": 1 }, "reading_order": 0 } ], "reading_order": 3 } ], "reading_order": 8 }, { "id": "p2.10", "order": 25, "type": "heading", "bbox": { "l": 34.8, "t": 169.44, "r": 90.48, "b": 155.04 }, "text": "HISTORY:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 9 }, { "id": "p2.11", "order": 26, "type": "table", "bbox": { "l": 35.28, "t": 139.68, "r": 576.24, "b": 104.4 }, "text": "", "attrs": { "block_label": "table", "n_rows": 1, "n_cols": 3, "integrity": { "cells_checked": 3, "cells_flagged": 0 } }, "children": [ { "id": "p2.11.1", "order": 27, "type": "table_cell", "bbox": { "l": 41.775, "t": 136.54999999999995, "r": 136.107, "b": 109.26999999999998 }, "text": "Revision Type\nIssued (New Policy)", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true }, "reading_order": 0 }, { "id": "p2.11.2", "order": 28, "type": "table_cell", "bbox": { "l": 275.63, "t": 136.54999999999995, "r": 400.838, "b": 109.26999999999998 }, "text": "Date of Issuance/Revision\nJune 2025", "attrs": { "row": 0, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 1 }, { "id": "p2.11.3", "order": 29, "type": "table_cell", "bbox": { "l": 424.17, "t": 136.54999999999995, "r": 516.462, "b": 109.26999999999998 }, "text": "Drafter(s)/Editor(s)\nZach Atwell", "attrs": { "row": 0, "col": 2, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 2 } ], "reading_order": 10 } ] } ] }