IT Policies and Guidelines

The following policies and guidelines are part of an overall strategy to provide a secure and stable IT environment to support users, research, and university business. See the complete list of Information Technology Policies on the VCFA website.

Data Security

• Multi-Factor Authentication Policy
• GLBA Safeguarding Rule: Quick Reference
• 947.0 Data Center Access Policy
• Fayetteville Policies and Procedures 911.0 Data Security Incident Response
• Fayetteville Policies and Procedures 912.0: Highly Sensitive Data Clean Desk and Clear Screen Policy
• Fayetteville Policies and Procedures 921.0: Data Classification
• Fayetteville Policies and Procedures 922.0: Data Management, Use and Protection
• Fayetteville Policies and Procedures 924.0 Data Disposal
• Fayetteville Policies and Procedures 925.0 Backup and Recovery Systems
• Fayetteville Policies and Procedures 926.0 Data Loss Prevention
• Fayetteville Policies and Procedures 933.0: Antivirus and Anti-Spyware Requirements and Virus Reporting
• Fayetteville Policies and Procedures 941.0: Secure Passwords and Passphrases
• Academic Policy 1900.10 Employee and Student Data: Use and Security
• Academic Policy 1900.20 Use of Student Information System Data by Direct Access Users
• NIST Special Publication 800-63-4: Digital Identity Guidelines (PDF)
• FERPA (Student Rights & Privacy)

Appropriate Use and Acquisition of Assets and Resources

• Copyright Infringement
• Fayetteville Policies and Procedures 208.0: Graphic Identity
• Fayetteville Policies and Procedures 313.2: Inventory/Equipment Capitalization Thresholds
• Fayetteville Policies and Procedures 313.3: University Equipment
• Fayetteville Policies and Procedures 313.4: Property Accountability
• Fayetteville Policies and Procedures 313.6: Information Technology Asset Management (ITAM) Policy
• Fayetteville Policies and Procedures 900.0: Code of Computing Practices
• Fayetteville Policies and Procedures 909.0: IT Services Supported Software
• Fayetteville Policies and Procedures 901.0: Computing Resources Use and Allocation
• Fayetteville Policies and Procedures 960.0: Acquisition of Enterprise Systems

Network

• IT Services Domain Name Service (DNS) Policy
• Computer and Network Security Policy
• Wireless Airspace Policy
• Fayetteville Policies and Procedures 980.0: UARKnet Organization
• Fayetteville Policies and Procedures 981.0: UARKnet Connection
• Fayetteville Policies and Procedures 982.0: Fiber Optic Cable Management

Administration and Communication

• VoIP 911 Policy
• e-Communications Privacy Policy
• Fayetteville Policies and Procedures 204.2: Electronic and Information Technology Accessibility including Website Accessibility
• Fayetteville Policies and Procedures 206.7: Export Control Compliance
• Fayetteville Policies and Procedures 218.0: Retention of Records
• Fayetteville Policies and Procedures 225.1: University Website Privacy
• Website Privacy Policy
• Fayetteville Policies and Procedures 221.1: Sponsorship Acknowledgement on Web Sites
• Fayetteville Policies and Procedures 225.0: University Web Sites and Online Communications
• Fayetteville Policies and Procedures 306.1: Cellular Communications
• Fayetteville Policies and Procedures 325.0: University Communications, Brand and Mass Email Usage
• Fayetteville Policies and Procedures 936.0: Mobile Device Security
• Fayetteville Policies and Procedures 964.0: Telephone Use

Technology Guidelines

• Data Center Operational Guidelines
• Issue Response Time Guidelines