PROCEDURE TITLE: SECURITY AWARENESS AND TRAINING

APPLIES TO:

All KSU students, faculty, staff, Board of Regent members, and all others who use, have access to, store, transmit or oversee KSU information technology resources. This applies to access of any KSU information resource from any device.

ADMINISTRATIVE AUTHORITY:

APPROVED BY: Kentucky State University Board of Regents

EFFECTIVE DATE: August 8, 2025

NEXT REVIEW DATE: August 8, 2028

PROCEDURE STATEMENT:

The purpose of this policy is to create and sustain an appropriate level of protection for Information Resources and Systems by improving awareness of information security risks and responsibilities. Specific objectives of this policy include:

1. Increasing awareness to ensure the protection of information resources and systems;
2. Ensuring that users of KSU information technology resources and systems know their roles and responsibilities for protecting information resources and systems;
3. Ensuring that users are knowledgeable about the University's information security policies and practices; and
4. Assisting users with develop skills and knowledge in order to perform their jobs securely

DEFINITIONS:

Cyber Security Threat is any malicious act that tries to obtain access to an information resource or system without authorization.