This policy will be reviewed and updated by the Security and Ethics Subcommittee on an annual basis, or as special events or circumstances dictate. R. POLICY REFERENCES Policy No. 4-OP-H-6 Use of University Information Technology Resources Policy No. 4-OP-F-2 Preparation and Issuance of Policies and Procedures A policy is typically a document that outlines specific requirements or rules that must be met. In the information/network security realm, policies are usually point-specific, covering a single area. For example, an "Acceptable Use" policy would cover the rules and regulations for appropriate use of the computing facilities. Information Security Policies, Procedures, Guidelines Revised December 2017 Page 6 of 94 PREFACE The contents of this document include the minimum Information Security Policy, as well as procedures, guidelines and best practices for the protection of the information assets of the State of Oklahoma (hereafter referred to as the State). 3. IT policies and procedures ensure the business meets meet legal, regulatory, and statutory requirements. Having IT policies and procedures is not a trend since technology is so hyped in this generation. It is actually compliant with the existing local, state, or national law. 3495 Collection, Use and Protection of Social Security Numbers; All official information technology policies are published in the K-State Policies and Procedures Manual. See the Information Technology Policy Approval Process to view the steps and timeline for new policies and changes to existing policies. IT Policy and Procedure Solutions by MasterControl Helps in Managing Information Technology Policies and Maintaining IT Procedures Effectively. An IT policy and procedure manual defines the responsibilities of employees in regard to these resources. information security and preservation The Information Security Policy Manual is available in PDF.. The University of Connecticut developed information security policies to