Rebuilt HTML — PaddleOCR-VL (Baidu)

POLICY TITLE: Data Security and Management

APPLIES TO: All users of KSU information technology resources

ADMINISTRATIVE AUTHORITY: Chief Information Officer (CIO) Department of Information Technology (IT)

APPROVED BY: Kentucky State University Board of Regents

EFFECTIVE DATE: August 8, 2025

NEXT REVIEW DATE: August 8, 2028

All Kentucky State University (KSU) data must be protected through appropriate security controls, access management, and backup procedures to ensure its confidentiality, integrity, and availability. This policy establishes the framework for securing university data in compliance with the Data Classification Policy and applicable laws.

The entity responsible for the day-to-day maintenance, backup, and security of KSU Information Resources. The Department of Information Technology generally serves as the Data Custodian.

The KSU manager or department head responsible for the business function supported by an information

resource. Data Owners are responsible for approving access to their data.

KSU data will be protected through specific technical controls, access will be managed based on the principle of least privilege, and critical data will be backed up according to a defined schedule to ensure business continuity.

The specific technical controls, access management procedures, and backup/disaster recovery plans are detailed in their respective implementing regulations.