REGULATION TITLE: Data Security Controls

APPLIES TO: All users of KSU information technology resources

ADMINISTRATIVE AUTHORITY: Chief Information Officer (CIO) Department of Information Technology

APPROVED BY:

Kentucky State University Board of Regents

EFFECTIVE DATE:

August 8, 2025

NEXT REVIEW DATE:

August 8, 2028

REGULATION STATEMENT:

This regulation implements the Data Security and Management Policy by establishing the specific, mandatory technical controls required to protect university data and information systems.

DEFINITIONS:

Personally Identifiable Information (PII)

Sensitive information that can be used to identify an individual, such as Social Security number, date of birth, and driver's license number.

PROCESS:

Password Security