|
Related Human Resource Policies Policy AD20 Computer and Network Security -- Disaster Recovery is mentioned on page 4 under the System Administrators' responsibilities. The first bullet (a) says that system administrators are responsible for "Preparing and maintaining security procedures that implement University and College/Unit security policies in their local environment and that address such details as access control, backup and disaster recovery mechanisms and continuous operation in case of power outages." Policy AD35 University Archives and Records Management -- This is the University's archival policy that outlines record management standards. This includes retention/disposition schedules. Guideline ADG02 Computer Facility Security -- Backup and Recovery is mentioned on Page 3. The Standards section states that "The following minimum security standards apply to all Trusted Networks and are recommended for all University Computer and Network Resources...Backup and Recovery mechanisms must be in place to ensure full monthly backups and weekly incremental backups...Recovery mechanisms must be tested and should not impose undue delays in re-establishing user data or system files." Policy AD23 Use of Institutional Data -- Page one of this policy states: "The integrity of institutional data (including Computerized Institutional Data) must be assured. All institutional data must be protected from unauthorized modification, destruction or disclosure, whether accidental or intentional. (See Policy AD20 )." Policy SY18 Bomb Threats -- This is the policy for what to do when there's a bomb threat. They also have a policy for emergency evacuations and fire drills, that's only for Residence Halls. Policy SY01 Environmental Health and Safety Policy -- Protecting Penn State's environment, employees, students and visitors is important. This policy outlines the statements that all employees, students, and visitors should follow.
|