Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: removed bulleted items in Roles and Responsibility section

...

It is primarily the responsibility of University Data Owners[2], or their designates, to develop local procedures to assure that the unit is in compliance with this standard and its associated procedures governing the removal, disposal, destruction, surplus, re-distribution, or exchange of media containing sensitive institutional data.

  • Each academic department, business unit, and affiliate shall designate or otherwise appoint an employee responsible for overseeing the proper removal and/or destruction of media containing University information.
  •  The designated employee will prepare and sign the Media Certification section of the OEM Report of Surplus Property form.
  • As part of their Internal Controls activities, academic departments and business units will report to the University Internal Control coordinator on their efforts to comply with this protocol during their regular Internal Controls reviews.

Compliance

Compliance with this standard and its related procedures will be in accordance with the Compliance section of the University's Information Security Policy.

...