New and Recently Updated Policies

What's new and important for you to know?

Policies in Development

Submit Comments!

Please submit your comments and questions regarding draft policies to policy@iastate.edu or use the Feedback button above.

Domain Name System (DNS) Proposed Policy Revisions

This policy revision is in response to an internal audit finding prompting the addition of a requirement that all ISU website owners must register their host or domain name in a central registry to help with assessing them for security weaknesses and digital accessibility issues.

Email, University Communications

This policy has been updated to clarify email communication expectations for ISU for Students, Faculty, and Staff.

Minimum Security Standards and Guidance Proposed Revision

This is policy is being revised after an internal audit finding prompted the addition of requirements for 1) a timeframe for installing security updates 2) a requirement that everyone uses an operating system that can receive security updates 3) a requirement to track and manage the University inventory of endpoint systems to improve our lifecycle management.

IT Security Proposed Policy Revision

This policy has been revised to add a section on vulnerability management in response to an internal audit review.