Policies and Regulations

POLICY TITLE: Information Technology Audit and Accountability

APPLIES TO: All user of KSU information technology

ADMINISTRATIVE AUTHORITY: Chief Information Officer (CIO) Department of Information Technology (IT)

APPROVED BY:

Kentucky State University Board of Regents

EFFECTIVE DATE:

August 8, 2025

NEXT REVIEW DATE: August 8, 2028

POLICY STATEMENT:

This policy establishes the framework for decreasing risks to Kentucky State University's (KSU) information technology (IT) resources and systems by ensuring accountability and adherence to security policies and procedures through a formal program of monitoring and reviews.

DEFINITIONS:

IT Audit

A formal review and examination of an organization's information technology infrastructure, applications, and operations to assess compliance with policies and the effectiveness of controls.

PROCESS:

Audit and Review Program