Policies & Standards

• Procedures

  • Family Education Rights and Privacy Act (FERPA) [pdf]

    Health Insurance Portability and Accountability Act (HIPAA) [pdf]

    Payment Card Industry Data Security (PCI DSS) [pdf]

• Policies

  • CSU Responsible Use Policy [pdf]

    Information Security Brochure [pdf]

    Information Security Program [pdf]

• Online Practices

  • Computer Crime Privacy Laws [pdf]

    Information Classification [pdf]

    Web Application Development [pdf]

• Computer Policies

  • AirWave [pdf]

    Access Control [pdf]

    Application Service [pdf]

    Asset Control [pdf]

    Computer Crime Privacy Laws [pdf]

    Data Center Security [pdf]

    Data Disposition [pdf]

    Electronic and Digital Signatures [pdf]

    Email Campus Communication [pdf]

    Email Retention [pdf]

    Event Monitoring [pdf]

• Security Awareness

  • Information Classification Handling [pdf]

    Information Security Awareness Training [pdf]

    Information Security Incident Management [pdf]

• Networking and Physical Security

  • Network Security [pdf]

    Patching Malicious Code Management [pdf]

    Physical Security [pdf]

    Record Retention and Disposal [pdf]

    Risk Assessment Program [pdf]

• Password and Workstations

  • SJSU Password [pdf]

    Vulnerability Management Assessment [pdf]

    Web Application Development [pdf]

    Workstation Hardware [pdf]

    Workstation Refresh and Imaging Standards [pdf]