Search it.vt.edu:

Policies
University Policies

University numbered policies are statements of management philosophy and direction, established to provide direction and assistance to the university community in the conduct of university affairs (www.policies.vt.edu). Policies of particular relevance to information technology include the following:

• 7000 - Acceptable Use and Administration of Computer and Communication Systems
• 7010 - Policy for Securing Technology Resources and Services
• 7025 - Safeguarding Nonpublic Customer Information
• 7030 - Policy on Privacy Statements on Virginia Tech Web Sites
• 7035 - Privacy Policy for Employees' Electronic Communications
• 7040 - Policy and Procedures for Personal Credentials for Enterprise Electronic Services
• 7100 - Administrative Data Management and Access Policy
• 7105 - Policy for Protecting University Information in Digital Form
• 7200 - University Information Technology Security Program
• 7205 - Information Technology Infrastructure, Architecture, and Ongoing Operations
• 7210 - Information Technology Project Management
• 7215 - Information Technology Accessibility

• 4082 - Appropriate Use of Electronic Personnel and Payroll Records
• 4325 - Alternate Work Site and Telework Policy
• 5205 - Sales and Solicitation on Campus
• 5210 - Advertising on Campus

• 10100 - Policy for the Purchase of Departmental-Based Computer Systems

Information Technology Standards

Standards, like other university procedures, are statements that prescribe specific actions to be taken to conform to established policies, allowing for the orderly implementation of those policies. Standards require compliance. Current standards are:

• Acceptable Use of Information Systems at Virginia Tech
• Accessibility Standards
• Project Management Standards and Procedures
• Security Standards
• Security Standards for Social Security Numbers
• Standard for Protecting Sensitive University Information Used in Digital Form
• Standard for Storing and Transmitting Personally Identifying Information
  • Exceptions: permission to store data elements in individual-use devices or mobile devices
  • Exceptions: permission to store data elements in third-party systems
• Standards for Infrastructure, Architecture, and Ongoing Operations

Virginia Tech Certificate Authority

The Virginia Tech Certification Authority (VTCA) provides a digital certificate service to the campus community. Digital certificates are electronic identity credentials that use encryption to support secure access to a large number of web services and applications. The governing documents for the VTCA are below. Also, see www.pki.vt.edu.

• The Virginia Tech Certification Authority Certificate Policy
• Virginia Tech Root Certification Authority Certification Practices Statement
• Virginia Tech Class 1 Server Certification Authority Certification Practices Statement
• Middleware Certification Authority
• User Certification Authority Certification Practices Statement

Federated Identity Management

Virginia Tech participates in federated identity management, allowing services provided by other institutions to authenticate and authorize Virginia Tech individuals securely and with appropriate protection of confidentiality.

• InCommon Participant Operational Practices
• Shibboleth Project

• Administration
• Organization
• Services & Status Messages
• Publications
• For IT Employees
• Spotlight
• Home - it.vt.edu