Information Technology

Information Security Awareness Standard

The Information Security Awareness Training standard provides guidelines that are designed to provide campus community members with guidance on training for the securing of information resources.

Comments or feedback on this standard should be directed to the Office of the Chief Information Officer at (831) 582-4700.

Scope

All CSUMB staff, faculty and student employees with access to Confidential or Internal Use data.

Standards

All CSUMB employees with access to Confidential or Internal Use data will be required to complete training in the handling and securing of protected data.

Training can be completed via the Skillport web-based training.

These trainings will help users safeguard their personal information as well as university data they access and cover the following topics:

• Protecting yourself against viruses, malware, spyware and other threats to information
• Keeping email and mobile devices secure
• Constructing a good password
• Managing protected information
• Surfing the web safely

Roles and Responsibilities

Administrative Systems Management will supply Information Technology with information on all existing and future staff, faculty and student assistants with access to Confidential and Internal Use data.

Student Information Systems will supply Information Technology with information on all existing and future staff, faculty and student assistants with access to Confidential and Internal Use data.

Information Technology will manage users within the training environments, including employee and supervisor notification for non-completion of training.

Employees will be responsible for completing the training.

Employee’s supervisor will be responsible for ensuring employee participation in the training.

CSUMB Informational Technology will provide training completion reports to appropriate administrators.

Revision Control

This standard will be subject to revision in response to changes in technology, regulatory compliance, and/or CSUMB operational initiatives.

Last reviewed/updated

06/21/2019 by Chip Lenno, CIO/ISO