Data owners must actively monitor and review their systems and procedures for potential misuse and/or unauthorized access.

Data owners and users must adhere to the Banner Security Audit procedure.

8. Requests for Data or Information

Refer all requests for data or information under the open records law to the General Counsel's office.

9. Loss of Restricted or Confidential Information

The loss, breach or unauthorized access of any restricted or confidential data or information must be reported immediately to:

  • Information Technology
  • General Counsel
  • Risk Management
  • KSU Police Department

Theft or loss of any Information Resource containing any sensitive data must be reported to:

  • KSU Police Department
  • Information Technology

10. Definitions

Data: Information which is recorded - regardless of form or media – that is used to support the business of the University, whether in an administrative or research capacity. Data may be saved or transmitted in hard copy (printed or written), digital/electronic (video, audio, or photo images) or other formats.

Data Custodian: An employee who is responsible for day-to-day maintenance, backup and recovery, granting access and privileges, and physical security of KSU Information Resources. The Data Custodian shall adhere to information security policies and procedures to manage data or information resources in their care. This is shared a responsibility between Information Technology (backup and recovery) and Data Owners (access and control).

Data Owner or Module Manager: The manager or university official responsible for the