POLICY TITLE: Information Technology Access Control

APPLIES TO: All users of KSU information technology resources

ADMINISTRATIVE AUTHORITY: Chief Information Officer (CIO) Department of Information Technology

APPROVED BY: Kentucky State University Board of Regents

NEXT REVIEW DATE: August 8, 2028

This policy establishes the framework to preserve and protect the confidentiality, integrity, and availability of Kentucky State University (KSU) information resources and systems. Access to KSU's technology resources is managed based on the principles of business requirement, job function, and "need-to-know" to minimize exposure from unauthorized use.

The selective restriction of access to a data or technology resource.

The process of verifying the identity of a user to ensure they are who they claim to be before granting access to a system.