Ohio Administrative Code › Title 3364 - University of Toledo › Chapter 3364-65 - Technology Security and Safeguarding › Section 3364-65-05 - Technology asset management policy

Current through all regulations passed and filed through July 1, 2024
(A) Policy statement
The procurement, deployment, and disposal of technology must be
				conducted in a manner that serves the university's mission and its requirements
				for quality, cost reduction, durability, serviceability, safety, environmental
				protection, and security. Technology assets procured outside university
				approved channels may not be supported by information technology and may not be
				granted access to university resources.
(B) Purpose
This policy identifies requirements for the acquisition,
				handling, and disposal of all technology assets in a manner authorized by the
				vice president, chief information officer/chief technology officer "CIO/CTO" or
				designee. The intended result of this policy is to maintain consistently high
				standards of quality, durability, serviceability, and security of technology
				assets, efficient and effective of university operations, security and privacy
				of information, proper licensing and use of software and intellectual property,
				efficient and effective use of consumables and supplies, and the safe handling
				of hazardous materials in the acquisition, operation, disposal, servicing or
				transfer of university technology assets.
(C) Scope
This policy applies to the procurement and acquisition,
				operation, disposal, servicing, transfer, and disposal of all university
				technology assets by university agents and affiliates, including all university
				acquired, owned, or issued electronic hardware and software assets, such as
				desktop, laptop, and tablet computers and any computing systems purchased to be
				used as a server or network device, whether purchased by the university,
				procured through a grant, donated to the university.
(D) Definitions
(1) Technology asset. Technology assets are
			 the hardware and software acquired by, owned by, controlled by, or in the
			 custody of the university.
(2)
			 Information technology asset. Information technology assets "IT assets" are the
			 subset of technology assets that consist of computer workstations and other
			 general computing assets and their peripherals, university mobile computing
			 devices, and network and storage infrastructure equipment used to carry out
			 university business or to access, store, or transmit, or receive university
			 data.
(3) Device. Device means any
			 electronic computing technology asset with associated equipment, peripherals or
			 storage media, regardless of ownership or control, such as a personal microsoft
			 windows or apple mac os-based desktop, laptop, or tablet computer (personal
			 computer) "pc," a personal mobile device such as a tablet, e-reader, or
			 smartphone, or any other such equipment used for university business or to
			 access, store, or transmit, or receive university data. Devices may be owned by
			 the university, by an individual, or by a third party (such as home pc's and
			 personally owned tablets or smartphones). In addition to the requirements
			 established by this policy, devices are technology assets subject to the
			 additional conditions specified in the "device and workstation
			 policy."
(4) Sanitization.
			 Sanitization refers to the process by which information is rendered reasonably
			 unrecoverable or removed from a technology asset, such as by overwriting
			 information with meaningless data.
(5) Sensitive data. Sensitive data is data
			 for which the university has an obligation to maintain confidentiality,
			 integrity, or availability.
Appropriate use of data is to be used
				on the role you are serving the institution. User rights to this data should be
				role based when system functionality is applicable.
(6) Workstation. Workstations are the subset
			 of devices acquired by, owned by, controlled by, or in the custody of the
			 university, whether leased or purchased directly by the university, procured or
			 issued through a grant, donated to the university, or provided to the
			 university by private funding. In addition to the requirements established by
			 this policy, workstations are technology assets subject to the additional
			 conditions specified in the device and workstation policy.
Appropriate use of resources; use only
				those computing resources in manner that they were authorized or intended
				for.