Any data, information, or system used by KSU. This includes all procedures, equipment, facilities, software, and data used to create, collect, process, store, or transmit information on any university-owned or managed platform.
As defined by KRS 365.732, an individual's first name or first initial and last name, combined with any one or more of the following: Social Security number; driver's license number; or an account, credit, or debit card number in combination with any required security code or password.
KSU will implement and maintain a comprehensive IT security program that addresses, at a minimum, the following areas, which are governed by their own specific policies, regulations, or procedures:
Acceptable Use
Awareness and Training
Access Control
Audit and Accountability
Data Classification
Business Continuity and Disaster Recovery
Incident Response
Any member of the KSU community who suspects or becomes aware of an Information Security Incident must report the incident immediately through one of the following channels:
Contact the IT Help Desk or the Chief Information Officer (CIO) directly by phone (preferred), e-mail, or in person.
Contact their department supervisor, who must then contact the CIO immediately. If the supervisor is unavailable, the individual must contact the appropriate divisional Vice President, who must then contact the CIO immediately.
Any employee, student, or other individual who commits, or refuses to cooperate in the investigation of, a violation of this policy may be subject to disciplinary action, including but not limited to termination, loss of data-access privileges, administrative sanctions, and personal civil and criminal liability.
KSU Appropriate Use of Technology Policy
KSU Information Technology Audit and Accountability Policy
KSU Data Classification Policy
KSU Security and Management Policy
KRS 365.732