• KSU will adhere to a formal, documented process for the monitoring, managing, and reviewing of system, application, network, and user access.
• Periodic, random reviews will be conducted to identify system vulnerabilities.
• The remediation of any findings from these reviews will be prioritized and resolved on an ongoing basis.

Enforcement

Any employee, student, or other individual who commits a violation of this policy, or who refuses to cooperate in the investigation of a violation, may be subject to disciplinary action. Sanctions include, but are not limited to, termination, loss of data-access privileges, administrative sanctions, and personal civil and criminal liability.

REFERENCES AND RELATED MATERIALS:

• KSU IT Security Policy
• KSU Appropriate Use of Technology Policy
• KSU Data Classification Policy

CONTACTS:

HISTORY: