Information Technology
Description
Many of Kentucky State University's services are impacted by, and dependent on, information technology. In many cases, information technology allows for operational efficiency and effectiveness. This critical resource warrants attention to ensure the risks are properly mitigated.
| Self-Assessment | ||||
| Standard | Yes | No | N/A | |
|---|---|---|---|---|
| 1 | Are there documented policies and procedures for information technology activities? | |||
| 2 | Is all information technology activity administered through the Information Technology department (e.g., software / equipment purchases and implementations, user accounts)? | |||
| 3 | Are all users required to read, agree to, and comply with the Information Technology user / security policies? | |||
| 4 | Are all applications and data files restricted to authorized users? | |||
| 5 | Is each authorized user assigned a unique identification and confidential password so that accounts are not intentionally shared? | |||
| 6 | Is training provided for basic computer security measures? | |||
| 7 | Are user accounts promptly deactivated for terminated users? | |||
| 8 | Does the department have a business continuity plan in case there is a catastrophic failure of its information technology resources? | |||
| 9 | Is compliance with Information Technology requirements monitored? | |||
| 10 | Is there a technology liaison for your area to ensure the proper authorization, coordination and maintenance of computer systems? | |||
[27]