POLICY TITLE: Data Security and Management

APPLIES TO: All users of KSU information technology resources

ADMINISTRATIVE AUTHORITY: Chief Information Officer (CIO) Department of Information Technology (IT)

APPROVED BY: Kentucky State University Board of Regents

EFFECTIVE DATE: August 8, 2025

NEXT REVIEW DATE: August 8, 2028

All Kentucky State University (KSU) data must be protected through appropriate security controls, access management, and backup procedures to ensure its confidentiality, integrity, and availability. This policy establishes the framework for securing university data in compliance with the Data Classification Policy and applicable laws.

The entity responsible for the day-to-day maintenance, backup, and security of KSU Information Resources. The Department of Information Technology generally serves as the Data Custodian.

The KSU manager or department head responsible for the business function supported by an information