A Policy is a high-level statement equivalent to organizational law that drives decision making within the University. The Information Security Office publishes and maintains Policies that govern the use and protection of University data and computing resources. Policies published by the Information Security Office undergo a rigorous review process and are sanctioned by the Office of the President. A comprehensive list of all Policies sanctioned by the Office of the President can be found on the University Policies website. The following is a list of Policies published by the Information Security Office as well as several other University Policies pertinent to the protection of IT resources.