Information_Technology_Security_Policy.pdf — PaddleOCR-VL (Baidu)

POLICY TITLE: Information Technology Security

APPLIES TO: All users of KSU information technology resources

ADMINISTRATIVE AUTHORITY: Chief Information Officer (CIO) Department of Information Technology (IT)

APPROVED BY: Kentucky State University Board of Regents

EFFECTIVE DATE: August 8, 2025

NEXT REVIEW DATE: August 8, 2028

POLICY STATEMENT:

This policy communicates the security measures required to ensure the appropriate protection and safeguarding of Kentucky State University's (KSU) Information Technology (IT) resources and systems from unauthorized access and misuse. KSU is committed to implementing security measures that ensure the confidentiality, integrity, and availability of its IT resources. Every user of KSU's IT resources bears responsibility for protecting these resources in compliance with this policy and all applicable laws.

DEFINITIONS:

Information Security Incident

An actual or suspected event that adversely affects the security of KSU's information resources or systems. Examples include, but are not limited to: website defacement, theft or loss of a computing device containing PII, unauthorized access to data, a computer infected with malware, or a data breach.