Policy and Compliance Committee

Scope of Responsibilities
The Policy and Compliance Council will provide the leadership and expertise needed to develop a comprehensive security strategy to protect our information technology environment.

• Working with the IT Academic & Staff Advisory Council to develop IT security policies,compliance methods, and procedures for the institution,
• Identifying, Implement and enforce security policies across the institution in accordance with federal, state, and IHL directives,
• Designing, implementing, and maintaining an effective security infrastructure for the institution, including but not limited to firewalls, intrusion detection systems, and anti-virus software,
• Reviewing security logs and other output of security-related products,
• Coordinating responses to security-related incidents in accordance with policy, and
• Monitoring security-related Internet sites and other resources to keep the CIO informed of new vulnerabilities and attack methods.
• Coordinating Site Software License Management

  Centralizing IT personnel at all locations will work with the Security Group to implement security procedures, maintain locally-administered security products, respond to security incidents, and install patches on servers and workstations to correct security vulnerabilities.

  Each campus will provide security resources to implement effective strategies.

  Centralizing IT personnel, under the guidance of the Security Group, will implement encryption capabilities for portal, e-mail, instant messaging (IM) and other interfaces delivering sensitive data.

• Implementing the IT security life cycle, a process of continually evaluating and deploying new strategies in the following areas:
• Security policy design and approval.
• Security policy implementation.
• Security training for IT and non-IT personnel
• Security audits and assessment by outside resources, including policy review.

Voting Members
Chair – Bill Derwostyp, Technology Securitry Officer
Co-Chair – Vijay Patel, Director, Office of Internal Audit
Faculty representative from each college
   CoAL – Subrina L Cooper, Assistant Professor
   CoB – Ernie King, Director/Associate Professor
   CoEP – Open
   CoH – Open
   CoST – Justin McKenzie
University Libraries – Barton Spencer, Assoc Prof/Head,Elec Res Dept
Wanda Naylor, HR Employment and Training Coordinator
Greg Pierce, Director, Office of the University Registrar
SGA appointee – Open
Mike Fulce - iTech - Manager, Database Administration
Brandie Simmons - iTech - Customer Service Specialist
Lee Gore- University Legal Counsel
Stephen Judd – Faculty Senate