Global Navigation
California State University Information Security Standards
The system wide standards were developed to support the CSU Information Security Policy. The following chart describes the relationship between the standards described in this document and the system wide information security policy
Review the CSU System Wide Information Security Standards document
(Note to Reviewers: This section may be significantly revised. At this point, the information provided below is intended as background for the review process.)
Security Policy Topic |
Potential Standards |
Information Security Roles & Responsibilities |
Campus President |
Risk Management |
Risk Management /Assessment |
Personnel Security |
Termination and Position Change |
Privacy |
Web Site Privacy |
Security Awareness and Training |
|
Third Party Services Security |
Third Party Use of CSU Resources |
Information Technology Security |
Network Controls Management |
Remote Access |
|
Mobile Device Management |
|
Boundary Protection and Isolation |
|
Logging Elements |
|
Configuration Management and Change Control |
Change Management |
Baseline Management |
|
Access Control |
|
Encryption |
|
User Privilege Authorization and Management |
|
Asset Management |
|
Clean Desk |
|
Management of Information Systems |
Development Management |
Web Application Coding |
|
Life Cycle Management |
|
Information Security Incident Management |
Evidence Collection |
Reporting |
|
Physical Security |
Security Zones |
Secured Entrance |
|
Secured Infrastructure |
|
Viewing Controls |
|
Data Center Access |
|
Business Continuity and Disaster Recovery |
(See Applicable EO) |
Legal and Regulatory Compliance |
|