For additional information about this session, see Appendix III . Please refer to the Property Control Manual and the Guide to Risk Management and Insurance Policies and Procedures for additional information. Providers are responsible for ensuring that appropriate efforts are expended to maintain the integrity, confidentiality, and availability of the information. Employees requesting access to University computer systems must agree to comply with all University policies on security, computer access, and confidentiality of data. Discussion Information resources must be protected from destruction, unauthorized use, or unauthorized change.
Users are responsible for the security of data to which they have access.
Deliberately tampering with data or committing a breach of confidentiality is prohibited and can lead to dismissal and legal action. Advances in technology have made data more widely available at the University. Information security at the department level must be considered in all offices as the demand for information increases. Need should be the basis of all decisions relating to information availability. Managers should provide access only to the data that employees need to perform their work.