Preamble

This document (the IT Security Policy Framework) represents a formalized organizational structure for Information Technology policies, standards and processes. 

The Framework, also known as an Information Security Management System (ISMS), provides a risk-based architecture for consistent IT security practices that govern the entire University. The document provides a summary context, scope, components and linkages to specific enterprise IT security policies and supporting references.