Policies & Procedures

This page serves as a centralized resource for University IT policy and governance information. The policy links provided on this page direct users to the official policy records maintained in the University Policies and Procedures Manual, ensuring access to the most current and authoritative version of each policy. In addition to university-approved IT policies, this page includes supporting standards, procedures, guidelines, and related governance documentation maintained by the Division of Information Technology to support implementation and compliance with University IT policies.

Note: The Office of the Provost maintains the University Policies and Procedures Manual, which serves as the official repository for approved University policies. The Division of Information Technology is the responsible administrative office for the University IT policies referenced on this page and supports their development, review, implementation, and maintenance in accordance with the University's established policy approval process and UNIV 1.00 – Policy on Policies: Development and Oversight of University Policies

Policies & Procedures

A policy is a high-level, mandatory directive that defines an organization's stance on a specific IT-related topic (e.g., security, data privacy, access control). Whereas a procedure is a step-by-step, operational process that outlines how to implement a policy or standard.

Policy	Procedure(s)	Scope	Keywords (hidden column)
IT 1.00 [pdf] - Information Technology Procurement	IT 1.00 Procedure [pdf] - Information Technology Procurement	USC System	tag 1, tag2
IT 3.00 [pdf] - Information Security	IT 3.00 Procedure [pdf] - Information Security	USC System
IT 5.00 [pdf] - Digital Accessibility	IT 5.00 Procedure [pdf] - Digital Accessibility	USC System
UNIV 1.51 [pdf] - Data and Information Governance	UNIV 1.51 Procedure [pdf] - Data and Information Governance	USC System
UNIV 1.52 [pdf] - Responsible Use of Data, Technology, and User Credentials	UNIV 1.52 Procedure [pdf] - Responsible Use of Data, Technology, and User Credentials	USC System

Standards

A standard is a detailed, measurable requirement that supports a policy by defining specific rules, technologies or configurations to be followed. Must be a licensed technician in ServiceNow to access standards, such as an IT Manager.

Standard Name	Policy	Keywords (hidden column)
Physical Access Standard	IT 3.00
Email Security Configuration Standard	IT 3.00	tag 1, tag2
Security Monitoring Standard	IT 3.00
Vulnerability Management Standard	IT 3.00
Technical Security Configuration Standard	IT 3.00
Asset Management Standard	IT 3.00
Account Management Standard	IT 3.00

Guidelines

A guideline is a recommended best practice that provides flexibility and guidance for achieving compliance.

Guideline Name
Using AI in Meetings Guidelines
Purchasing AI Guidelines

Division of Information Technology