Information Technology Policies, Standards, Baselines and Guidelines - Knowledge Base

Summary

Virginia Commonwealth University provides and maintains computing resources to support the University's mission-critical operations of education, research, service, and administration. To ensure that faculty, staff, and students use these resources ethically, equitably, and legally, VCU has established specific IT policies, standards, baselines, and guidelines. All users of VCU systems, data, information, and technology resources must adhere to these requirements.

Environment

Information Technology Policies, Standards, Baselines and Guidelines

Solution

Information Technology Baseline

IT Professionals use information Technology Baselines in conjunction with the Information Technology Standards and Policies. The baseline documents contain a set of technical requirements that define the minimum required standard practices. These documents can be found in the IT Professionals Intranet (ITPI) under IT Resources - Security Baselines unless otherwise noted. Access to the IT Professionals Intranet is restricted to authorized IT professionals. IT professionals can request access by contacting uccnoc@vcu.edu.

Information Technology Guideline

An information technology guideline is a recommended practice that allows some discretion or leeway in its interpretation, implementation, or use.

Information Technology Standard

An information technology standard is a formal document for an established norm of methods, criteria, and processes for technology subjects. Standards are derived from the associated University Policy.

Key to Acronyms:

ITPI - Information Technology Professionals Intranet

NID - New in Development

NIRAP - New in Review/Approval Process

RID - Revisions in Development

RIRAP - Revisions in Review/Approval Process

TBD - To Be Developed

Information Technology Policy Framework

- Computer and Network Resource Use Policy

Information Security Policy
- Application Security Standard
- Business Partner Security Standard
- Change Management Standard
- Data Classification Standard
- Data Handling and Storage Standard‌
  - Media Sanitization Security Guideline (ITPI)
  - Research Information Security Baseline (ITPI)
  - Removable / Portable Storage Device Security Baseline (TBD)
  - System Backup Baseline (TBD)
- Disaster Recovery Standard
- Encryption Security Standard
  - Data Encryption Baseline (TBD)
- Incident Response Standard
- Network Management and Security Standard
  - Network Configuration and Security Baseline (ITPI)
- Password, Authentication, and Access Standard
- Personnel Security Standard
- Physical Security Standard
- IT Project Managment Standard
- Remote Access Standard
- IT Risk Management Standard
- VCU Email Standard
- VCU Alumni Email Standard
- System Security Standard
  - Active Directory Management Baseline (ITPI)
  - Apache Tomcat Server Configuration Baseline (ITPI)
  - Apache Web Server Configuration Baseline (ITPI)
  - Apple Desktop / Laptop Configuration Baseline (ITPI)
  - Application Security Baseline (ITPI)
  - Automated Software Distribution Baseline (ITPI)
  - Apple iOS Configuration Baseline (NID)
  - Google Android Configuration Baseline (NID)
  - Linux Desktop / Laptop Configuration Baseline (ITPI)
  - Linux Server Configuration Baseline (ITPI)
  - Microsoft IIS Web Server Configuration Baseline (ITPI)
  - Microsoft SQL Server Configuration Baseline (ITPI)
  - MySQL / MARIADB Configuration Baseline (ITPI)
  - Oracle Configuration Baseline (ITPI)
  - Public, Classroom, and Lab Computer Configuration Baseline (ITPI)
  - VCU IT System Pre‐Authentication Banner Text (ITPI)
  - Windows Desktop / Laptop Configuration Baseline (ITPI)
  - Windows Server Configuration Baseline (ITPI)
Exposure and Breach of Information Policy
Organizational Websites, Management, and Hosting Policy
- VCU Web Standards and Guidelines
Records Management Policy

Additional Information

Please contact us via email at infosec@vcu.edu or VCU IT Support Center at (804) 828-2227 or itsc@vcu.edu

Keywords: Information Technology Policies Standards Baselines Guidelines