Information Technology Policies, Standards, Baselines and Guidelines

Information Technology Policies, Standards, Baselines and Guidelines

Definitions

Information Technology Baseline

IT Professionals use information Technology Baselines in conjunction with the Information Technology Standards and Policies. The baseline documents contain a set of technical requirements that define the minimum required standard practices. These documents must not be shared with unauthorized individuals. These documents can be found below but are only accessible to employees that are IT Professionals. If you do you not hold an IT professional job role, but would like a copy of any baselines or guidelines, please contact the ISO (infosec@vcu.edu)

Information Technology Guideline

An information technology guideline is a recommended practice that allows some discretion or leeway in its interpretation, implementation, or use.

Information Technology Standard

An information technology standard is a formal document for an established norm of methods, criteria, and processes for technology subjects. Standards are derived from the associated University Policy.

Acronyms

AIP - Accessible to IT Professionals 

NID - New in Development

NIRAP - New in Review/Approval Process

RID - Revisions in Development

RIRAP - Revisions in Review/Approval Process

TBD - To Be Developed

Information Technology Policy Framework

- Computer and Network Resource Use Policy 

• Information Security Policy
  
  • Application Security Standard
  • Business Partner Security Standard
  • Change Management Standard
  • Data Classification Standard
  • Data Handling and Storage Standard‌ 
    • Media Sanitization Security Baseline (AIP)
    • Research Information Security Guideline (AIP)
    • Removable / Portable Storage Device Security Baseline (TBD)
    • System Backup Baseline (TBD)
  • Disaster Recovery Standard
  • Encryption Security Standard
    
    • Data Encryption Baseline (TBD)
  • Incident Response Standard
  • Network Management and Security Standard
    
    • Network Configuration and Security Baseline (AIP)
  • Password, Authentication, and Access Standard
  • Personnel Security Standard
  • Physical Security Standard
  • IT Project Managment Standard
  • Remote Access Standard
  • IT Risk Management Standard
  • VCU Email Standard
  • VCU Alumni Email Standard
  • System Security Standard
    
    • Active Directory Management Baseline (AIP)
    • Apache Tomcat Server Configuration Baseline (AIP)
    • Apache Web Server Configuration Baseline (AIP)
    • Apple Desktop / Laptop Configuration Baselines: 
      • Apple Desktop / Laptop Configuration Baseline - Ventura (AIP)
      • Apple Desktop / Laptop Configuration Baseline - Sonoma (AIP)
      • Apple Desktop / Laptop Configuration Baseline - Sequoia (AIP)
    • Application Security Baseline (AIP)
    • Automated Software Distribution Baseline (AIP)
    • Apple iOS Configuration Baseline (AIP)
    • Embedded Device Security Baseline (AIP)
    • Google Android Configuration Baseline (AIP)
    • Linux Desktop / Laptop Configuration Baseline (AIP)
    • Linux Server Configuration Baseline (AIP)
    • Microsoft IIS Web Server Configuration Baseline (AIP)
    • Microsoft SQL Server Configuration Baseline (AIP)
    • MySQL / MARIADB Configuration Baseline (AIP)
    • Oracle Configuration Baseline (AIP)
    • Public, Classroom, and Lab Computer Configuration Baseline:
      • Public, Classroom, and Lab Computer Configuration Baseline (AIP)
      • Public, Classroom, and Lab Computer Configuration Matrix (AIP)
    • Server Deprovisioning Baseline (AIP)
    • Server Deprovisioning Workflow (AIP)
    • Transport Encryption Security Guideline for TLS (AIP)
    • VCU IT System Pre‐Authentication Banner Text (AIP)
    • Windows Desktop / Laptop Configuration Baseline (AIP)
    • Windows Server Configuration Baseline (AIP)
• Exposure and Breach of Information Policy
• Organizational Websites, Management, and Hosting Policy 
  • VCU Web Standards and Guidelines
• Records Management Policy

Please contact us via email at infosec@vcu.edu or VCU IT Support Center at (804) 828-2227 or itsc@vcu.edu