Policies
Security Incident Reporting

Policies

It is the collective responsibility of all users to ensure the confidentiality, integrity, and availability of information assets owned, leased, or entrusted to SDSU Research Foundation in an effective, efficient, ethical, and legal manner. Users are expected to use good judgment and reasonable care in order to protect and preserve the integrity of research foundation equipment, its data and software, and its access. Users are responsible for observing policies related to the use of all internal and external computers or networks. Use of SDSU Research Foundation systems constitutes your understanding of agreement to the terms and conditions in the SDSURF Information Assets Responsible Use policy.

SDSU Research Foundation Information Security Policies

Information Assets Responsible Use Policy

Data Classification and Handling Policies

Password Policy

SDSU Information Security Plan

The SDSU Information Security Plan has been adopted by the President’s Cabinet. The Information Security Plan contains the minimum policies and standards necessary for protecting information, systems, and networks.

View the SDSU Information Security Plan

CSU System-wide Information Security Policies

System-wide policies are located in the CSU Integrated Administration Manual, ICSUAM, Section 8000, Information Security. The ICSUAM is established and maintained consistent with the responsibilities delegated by the CSU Trustees and the Chancellor.

View the "CSU System-wide Information Security Policies

Security Incident Reporting

If you become aware of a breach of protected data or of a security issues regarding SDSU Research Foundation computers or network resources, you must report it immediately. Please refer to the SDSU Information Security Plan, Section 2.0 Introduction to the IT Security Response Program (SIRP).

Incidents must be reported to your IT manager and the SDSU IT Security Office.

SDSU IT Security Office at security@sdsu.edu (monitored 24/7) or 619-594-0142

SDSU Public Safety at 619-594-1991 (emergency)

SDSURF Information Systems at 619-594-6931 or 619-594-1066

Report Spam, Phishing or Fraud EMails

Users should forward fraudulent email with headers, after removing attachments, to fraud@mail.sdsu.edu and spam email to spam@mail.sdsu.edu. See Section 2.4.5 of SDSU Information Security Plan.

* Note: Documents in Portable Document Format (PDF) require Adobe Acrobat Reader 9.0 or higher to view. Download Adobe Acrobat Reader