Information Security Controls provide implementation information for each standard at various risk levels. The controls could be interpreted as a “how-to” version of the standards.Aa coding scheme makes it easy to cross-reference between the documents. To better guide prioritization efforts, the detailed controls are specified according to the level of data being protected, as defined by the Data Management Policy.

We will continue to develop job aids in the form of documentation (procedures, checklists, templates) and software tools to support implementation of standards and controls. 

The standards are listed below with links to the individual control documents. You must be a member of the campus community to access them and will be prompted to login.