REGULATION TITLE: Data Access Management

APPLIES TO: All users of KSU information technology resources

ADMINISTRATIVE AUTHORITY: Chief Information Officer (CIO) Department of Information Technology (IT)

APPROVED BY:

Kentucky State University Board of Regents

EFFECTIVE DATE:

August 8, 2025

NEXT REVIEW DATE:

August 8, 2028

REGULATION STATEMENT:

This regulation implements the Data Security and Management Policy by providing the official procedure for requesting, approving, reviewing, and revoking access to university data and systems based on the principle of least privilege.

DEFINITIONS:

See Data Security and Management Policy for relevant definitions of Data Owner and Data Custodian.

PROCESS:

Requesting and Approving Access

• The Data Owner must approve all access to their data.