Security

Identity and access management, incident response and investigation, security policy and compliance, security consulting and education

Categories (3)

Accounts and Access

Account setup and use, passwords and access to systems.

Safeguarding Data and Devices

University employees have a legal responsibility to protect personal data for all students, faculty, and staff.

Articles (8)

Computer and Network Security Policy

Appropriate security shall include, but is not limited to: protection of the privacy of information, protection of information against unauthorized modification or disclosure, protection of systems against denial of service, and protection of systems against unauthorized access.

Daily Office Cybersecurity and Data Protection Checklist

Keep your account safe, prevent scams, send safe email, and practice good device hygiene with the Cybersecurity Checklist.

Higher Education Community Vendor Assessment Toolkit (HECVAT)

When purchasing third-party software or hardware, university personnel must obtain a HECVAT for the product from the vendor .

On-Premises Server Administration Responsibilities

To ensure that on-premises servers comply with enterprise standards and maintain the same level of security, operational integrity, and disaster readiness as servers migrated to Azure.

Requesting SSL Certificates

IT Services grants SSL certificates issued by Sectigo the InCommon Certificate Service. Certificates are valid for one year.

Summary of the Code of Computing Practices

This summary is compiled to make possible a quick review of the terms and provisions of the University of Arkansas' Code of Computing Practices. By using a University of Arkansas computer account, you are deemed to have agreed to comply with the Code of Computing Practices and to know its provisions.

Sending and Receiving Encrypted Email

Students, faculty and staff sending confidential or sensitive information over email should use the Encryption feature in Outlook.

GLBA Safeguards Rule Quick Reference

The GLBA Safeguards Rule (16 CFR 314) (“the Rule”) requires the university to develop, implement, and monitor processes aimed at ensuring the security of certain nonpublic personal information obtained when the university offers or delivers (or offers or delivers on behalf of an affiliate) a customer a financial service or product.