Purpose
The purpose of this policy is to implement appropriate protective controls to manage risks from information system flaws/vulnerabilities, malicious code, unauthorized code changes, and inadequate error handling.
Policy
It is the policy of Lynn University to identify, report, and correct institutional data and information system flaws in a timely manner. “System and information integrity” refers to the degree in which an applicable information system (or system component) prevents unauthorized access to, or modification of, computer programs or institutional data. system and data integrity controls are implemented by IT Coordinators in an effort to safeguard against improper institutional data modification or destruction of data and include ensuring information non-repudiation and authenticity.
Definitions
Data managers - data managers are application module administrators or power users responsible for the daily operation and management of systems and processes that collect, manage and provide access to institutional data.
Data users - individuals, including, but not limited to, employees, temporary employees, faculty, students, alumni, trustees, campus visitors, contractors, vendors, consultants and their related personnel authorized by the university to access information systems that collect, process, maintain, use, share, disseminate or dispose of institutional data.
Executive data stewards - executive data stewards are defined as institutional officers (e.g., vice presidents, deans, etc.) who have authority over policies and procedures regarding business definitions of data and the access and usage of that data within their delegations of authority. Each executive data steward appoints data stewards and data managers for their subject area domains.
Information system(s) - a set of information resources organized expressly for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information. The term system is used to represent all types of computing equipment and platforms that can process, store, or transmit institutional data.
Institutional data - any information collected, manipulated, stored, reported, or presented in any format, on any medium, at any location by any unit, program or office of the university in support of Lynn University’s mission. There are three types of institutional data: high risk; medium risk; and low risk. See the data classification and governance policy for additional information.
IT coordinators - IT coordinators are Information Technology staff responsible for the daily operation and management of systems, processes and applications that collect, manage, bridge and provide access to institutional data.
Procedures/Guidelines
To learn more about this policy or the supporting procedures, please contact Information Technology.