Information Security and Control Policy

Security

SIMAD University ICT resources and facilities shall be accounted for by the designated owner or the nominated custodian who at all times shall ensure the ICT resources are safe and in good conditions for optimal utilization.

Data Security and Classification

1. SIMAD University data shall either be data in public domain ,proprietary data or restricted data depending on the security levels demanded by such data and information as outlined below;
   1. Data and information in Public domain meant for communication and distribution to the general public
   2. Proprietary data mainly for SIMAD university internal use

• Restricted information and data for only specific persons mandated to perform specific responsibilities on sensitive university issues

1. SIMAD University Staff shall be required to practice and execute their responsibilities in an appropriate manner, disseminate information to any party on a need to know basis. In case of third parties accessing the university data and information, prior authorization must be sought and granted dictating the level of access. In such instances, the system administrator shall be present or aware of this action

Security Standards for SIMAD ICT Resources information and data shall implement Password and Authentication Policy for effective safety of t data and information