Rebuilt HTML — PaddleOCR-VL (Baidu)

Policies and Regulations

POLICY TITLE: Information Technology Audit and Accountability

APPLIES TO: All user of KSU information technology

ADMINISTRATIVE AUTHORITY: Chief Information Officer (CIO) Department of Information Technology (IT)

APPROVED BY:

Kentucky State University Board of Regents

EFFECTIVE DATE:

August 8, 2025

NEXT REVIEW DATE: August 8, 2028

POLICY STATEMENT:

This policy establishes the framework for decreasing risks to Kentucky State University's (KSU) information technology (IT) resources and systems by ensuring accountability and adherence to security policies and procedures through a formal program of monitoring and reviews.

DEFINITIONS:

IT Audit

A formal review and examination of an organization's information technology infrastructure, applications, and operations to assess compliance with policies and the effectiveness of controls.

PROCESS:

Audit and Review Program

• KSU will adhere to a formal, documented process for the monitoring, managing, and reviewing of system, application, network, and user access.
• Periodic, random reviews will be conducted to identify system vulnerabilities.
• The remediation of any findings from these reviews will be prioritized and resolved on an ongoing basis.

Enforcement

Any employee, student, or other individual who commits a violation of this policy, or who refuses to cooperate in the investigation of a violation, may be subject to disciplinary action. Sanctions include, but are not limited to, termination, loss of data-access privileges, administrative sanctions, and personal civil and criminal liability.

REFERENCES AND RELATED MATERIALS:

• KSU IT Security Policy
• KSU Appropriate Use of Technology Policy
• KSU Data Classification Policy

CONTACTS:

HISTORY: