← Information_Technology_Audit_and_Accountability_Policy.pdf
Rebuilt HTML โ PaddleOCR-VL (Baidu)
Content placed at each item's bbox to mirror the original PDF layout (font sizes are estimated). overlay ยท view JSON
Page 1
Download HTML
KENTUCKY STATE UNIVERSITY
Policies and Regulations
POLICY TITLE:
Information Technology Audit and Accountability
APPLIES TO:
All user of KSU information technology
ADMINISTRATIVE AUTHORITY:
Chief Information Officer (CIO)
Department of Information Technology (IT)
APPROVED BY:
Kentucky State University Board of Regents
EFFECTIVE DATE:
August 8, 2025
NEXT REVIEW DATE:
August 8, 2028
POLICY STATEMENT:
This policy establishes the framework for decreasing risks to Kentucky State University's (KSU) information technology (IT) resources and systems by ensuring accountability and adherence to security policies and procedures through a formal program of monitoring and reviews.
DEFINITIONS:
IT Audit
A formal review and examination of an organization's information technology infrastructure, applications, and operations to assess compliance with policies and the effectiveness of controls.
PROCESS:
Audit and Review Program
Page 2
Download HTML
KSU will adhere to a formal, documented process for the monitoring, managing, and reviewing of system, application, network, and user access.
Periodic, random reviews will be conducted to identify system vulnerabilities.
The remediation of any findings from these reviews will be prioritized and resolved on an ongoing basis.
Enforcement
Any employee, student, or other individual who commits a violation of this policy, or who refuses to cooperate in the investigation of a violation, may be subject to disciplinary action. Sanctions include, but are not limited to, termination, loss of data-access privileges, administrative sanctions, and personal civil and criminal liability.
REFERENCES AND RELATED MATERIALS:
KSU IT Security Policy
KSU Appropriate Use of Technology Policy
KSU Data Classification Policy
CONTACTS:
| Subject | Office | Telephone | |
|---|---|---|---|
| General Questions | Office of the CIO | (502) 597-7000 | Wendy.Dixie@kysu.edu |
HISTORY:
| Revision Type | Date of Issuance/Revision | Drafter(s)/Editor(s) |
|---|---|---|
| Issued (New Policy) | April 2020 | Unknown |
| Substantive Revisions | December 18, 2023 | Wendy Dixie and Zach Atwell |
| Minor Revisions (New Template) | June 2025 | Wendy Dixie and Zach Atwell |