| Standard |
When does it apply? |
|---|
| Desktop and Portable Computer Standard |
Always |
| Password Standard |
Always |
| Information Access & Protection Standard |
Always |
| Computer Incident Handling Standard |
Always |
| Portable Media Standard |
If you are storing Private or Confidential information on portable media, such as USB keys, CDs, DVDs, and flash memory. If you must store Private information on portable media, the media must be encrypted. |
| Web Security Standard |
If you have a web page at RIT, official or unofficial, and you:
- Own, administer, or maintain an official RIT web page that hosts or provides access to Private or Confidential Information.
- Use RIT authentication services
|
| Signature Standard |
If you are sending out an e-mail, MyCourses, or Message Center communication relating to Institute academic or business purposes. This applies to both RIT and non-RIT e-mail accounts. |
| Server Security Standard |
If you own or administer any production, training, test, or development server, and/or the operating systems, applications or databases residing on it. |
| Network Security Standard |
If you own or manage a device that:
- Connects to the centrally-managed Institute network infrastructure
- Processes RIT Confidential or Operationally Critical information
|
| Authentication Service Provider Standard |
If you are providing authentication services on network resources owned or leased by RIT. |