{
    "document_id": 16397,
    "page": 2,
    "width_pt": 612,
    "height_pt": 792,
    "rotation": 0,
    "pipeline_version": "paddleocr-vl-1.6+paul-48",
    "engine": "paddleocr_vl",
    "source_run_id": 16509,
    "item_count": 10,
    "counts_by_type": {
        "heading": 2,
        "text": 8
    },
    "build_ms": 2,
    "items": [
        {
            "id": "p2.1",
            "order": 1,
            "type": "text",
            "bbox": {
                "l": 75.84,
                "t": 700.32,
                "r": 534.96,
                "b": 671.04
            },
            "text": "information may be disclosed to any individual regardless of their relationship to KSU. While data or"
        },
        {
            "id": "p2.2",
            "order": 2,
            "type": "text",
            "bbox": {
                "l": 74.88,
                "t": 645.6,
                "r": 537.12,
                "b": 602.64
            },
            "text": "information that is classified as public has no restrictions, necessary controls and caution should always be exercised to ensure unauthorized modification does not occur and the integrity of the data remains intact."
        },
        {
            "id": "p2.3",
            "order": 3,
            "type": "text",
            "bbox": {
                "l": 75.84,
                "t": 590.16,
                "r": 212.88,
                "b": 576.24
            },
            "text": "Data Classification Chart"
        },
        {
            "id": "p2.4",
            "order": 4,
            "type": "heading",
            "bbox": {
                "l": 75.6,
                "t": 562.8,
                "r": 239.04,
                "b": 549.36
            },
            "text": "2. Data and Access Control",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p2.5",
            "order": 5,
            "type": "text",
            "bbox": {
                "l": 74.88,
                "t": 522.48,
                "r": 537.12,
                "b": 466.56
            },
            "text": "Each of the requirements set forth in this policy are based on the concept of need to know unless data is classified as public. Information must be disclosed only to those individuals who have a legitimate business need, specific authorization or approval for the information."
        },
        {
            "id": "p2.6",
            "order": 6,
            "type": "text",
            "bbox": {
                "l": 74.64,
                "t": 454.32,
                "r": 536.88,
                "b": 370.08
            },
            "text": "The proper controls shall be in place to authenticate the identity of users and to validate each user's authorization before allowing the user to access information or services on the system. Data used for authentication shall be protected from unauthorized access. Controls shall be in place to ensure that only personnel with the proper authorization and a need to know are granted access to KSU's systems and their resources. Remote access shall be controlled through identification and authentication mechanisms."
        },
        {
            "id": "p2.7",
            "order": 7,
            "type": "text",
            "bbox": {
                "l": 74.64,
                "t": 358.56,
                "r": 537.6,
                "b": 206.4
            },
            "text": "Data owners must approve users who will be permitted to gain access to information, and the uses to which this information will be utilized. Requests for access to KSU email, network, or Banner systems must be made to Information Technology. A written or email request must be submitted for all additions or changes to access Information Resources. When an employee changes departments the IT Help Desk must be notified, so access to that department's data can be removed from Information Resources. If access is still required by the employee, it must be approved again by the data owner. When an employee leaves the University, the IT Help Desk must be notified, so access to these Information Resources can be removed. Ex-employees may continue to have access to University email for a limited time, and if a business needs to require, with written approval from their Vice President."
        },
        {
            "id": "p2.8",
            "order": 8,
            "type": "text",
            "bbox": {
                "l": 74.88,
                "t": 195.12,
                "r": 536.64,
                "b": 152.88
            },
            "text": "All data users must take steps to ensure that appropriate controls are utilized in the storage, handling, distribution, and regular usage of electronic information regardless of classification."
        },
        {
            "id": "p2.9",
            "order": 9,
            "type": "heading",
            "bbox": {
                "l": 75.6,
                "t": 140.16,
                "r": 181.92,
                "b": 125.52
            },
            "text": "3. Transmission",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p2.10",
            "order": 10,
            "type": "text",
            "bbox": {
                "l": 74.64,
                "t": 113.28,
                "r": 536.64,
                "b": 84
            },
            "text": "Confidential data or files that are to be transmitted over external communication networks, wireless or between computers, must be sent only in encrypted form."
        }
    ],
    "excluded_furniture": {
        "first": [],
        "last": []
    }
}