Of paramount importance in carrying out this mission is the establishment of basic information security policies for managing University of Illinois administrative information, and the provision of reasonable security at an acceptable cost. Access to this information will be given in accordance with this policy to authorized users in a way that promotes productivity. This ownership of information extends to all media copies of such, as well as copies of information residing on mainframe, mid-range, and personal computers and local area networks, wherever the equipment or networks are located. Such information shall be used only for, and in the conduct of, University business or as appropriately authorized. Different types of data require different levels of security.
Public data are available or distributed to the general public.
Proprietary data are intended for internal University use and not for external distribution. C. Responsibilities 1. These standards are an extension of this policy. Supporting Units Any Unit supporting servers on which administrative information resides must implement the Data Custodian's access authorization and maintain system security functions in accordance with this policy. This includes development and maintenance of an internal security plan and associated documents which assure data integrity, authentication, recovery and continuity of operations which support administrative data, and includes such details as type of access controls, disaster recovery plans, and contingency plans for continuous operation in case of power outages, etc.