CSU Information Security

Policies and Standards

This page provides links to Information Security Policies and Standards as defined by the CSU and CSU East Bay.

The CSU Information Security policy provides direction for managing and protecting the confidentiality, integrity and availability of CSU information assets. In addition, the policy defines the organizational scope of the CSU information Security Policy. This index will take you to the CSU Policy Topic by clicking on the topic name. While in the CSU Policy you can navigate to all relevant Supplement Policy or Standards by clicking the corresponding link.

Section	CSU Policy	CSU East Bay Policy	Standard
8000.0	Introduction and Scope	CSUEB Supplemental Policy Campus IS Policy Directive
8005.0	Policy Management	CSUEB Supplemental Policy
8010.0	Establishing an Information Security Program
8015.0	Organizing Information Security		8015.S000 Roles & Responsibilities
8020.0	Information Security Risk Management		8020.S000 Exception Standard 8020.S001 Risk Assessment Standard
8025.0	Privacy of Personal Information
8030.0	Personnel Information Security		8030.S000 Personnel Security
8035.0	Information Security Awareness and Training		8035.S000 Security Awareness and Training
8040.0	Managing Third Parties		8040.S001 Third Party Security
8045.0	Information Technology Security	CSUEB Vulnerability Management CSUEB Mobile Device Standards and Guidelines	8045.S200 Malicious Software Protection 8045.S300 Network Controls Management 8045.S301 Boundary Protection & Isolation 8045.S302 Remote Access to Resources 8045.S400 Mobile Device Management 8045.S600 Logging Elements
8050.0	Configuration Management		8050.S100 Common Workstation Standard 8050.S200 High-Risk Workstation Standard
8055.0	Change Control		8055.S01 Change Control
8060.0	Access Control	CSUEB Password Policy	8060.S000 Access Control 8060.S000 Access Control - Appendix A
8065.0	Information Asset Management	CSU Level 1 Data Examples	8065.S001 Asset Management 8065.S02 Data Classification
8070.0	Systems Acquisition, Development and Maintenance		8070.S000 Application Security
8075.0	Information Security Incident Management		8075.S000 Incident Management
8080.0	Physical Security		8080.S01 Physical & Environmental Security
8085.0	Business Continuity and Disaster Recovery
8090.0	Compliance
8095.0	Policy Enforcement
8100.0	Electronic and Digital Signatures		8100.S01 Signature Standards & Procedures
8105.0	Responsible Use Policy

Who should I contact if I have more questions?

Please contact the Information Security Office at: iso@csueastbay.edu