Carnegie Mellon University Website Home Page
 

Policies 

A Policy is a high-level statement equivalent to organizational law that drives decision making within the University. The Information Security Office publishes and maintains Policies that govern the use and protection of University data and computing resources.  Policies published by the Information Security Office undergo a rigorous review process and are sanctioned by the Office of the President.  A comprehensive list of all Policies sanctioned by the Office of the President can be found on the University Policies website.  The following is a list of Policies published by the Information Security Office as well as several other University Policies pertinent to the protection of IT resources.

Information Security Policies

Name  Version
Published
Updated
Data and Computer Security Policy 1.1
05/01/1990
04/01/2001
Gramm-Leach-Bliley Act Information Security Program Policy 1.0
05/16/2003  N/A
HIPAA Information Security Policy 1.0  02/15/2008 TBD 
University Computing Policy 1.0
05/16/2003 N/A

Other Pertinent University Policies

Name  Version
Published
Updated
Copyright Policy of Carnegie Mellon University N/A
02/22/1995
N/A
Intellectual Property Policy N/A
07/30/1985
N/A
Privacy Rights of Students (related to FERPA) N/A
05/15/2001  N/A