Security and Privacy Policies

         A. Internet Privacy Policy
         B. Information Security Policy
              1.  Asset Classification Domain
              2.  Risk Assessment and Analysis Domain
              3.  Identity Management Domain
              4.  Access Control Domain
                   A.  Access to Electronic Records Held in Accounts Subsequent to Termination,
Departure or Death Protocol
                         1.  FORM:  Request for Access to a University at Albany Personal Account
Subsequent to Termination, Departure, Transfer, or Death
                          2.  FORM: Employee Access and Compliance Agreement
                          3.  Third Party Management of UA Web Site Agreement/MOU
              5. Infrastructure Management Domain
                   A. Media Disposal, Destruction, and Redeployment Protocol
                         1.  NIST Guidelines for Media Sanitization (table)
                         2.  Sanitization Procedures
                         3.  OGS Memorandum from June, 2005
              6.  Software Assurance Domain
              7.  Incident Detection and Management Domain
              8.  Information Security Awareness Program Domain
              9. Oversight of Service Providers Domain
            10. Documentation Domain