Search it.vt.edu:

IT Policies
University Policies

University numbered policies are statements of management philosophy and direction, established to provide direction and assistance to the university community in the conduct of university affairs. Policies are listed by policy number on the university policy page. (www.policies.vt.edu). Standards, like other university procedures, are statements that prescribe specific actions to be taken to conform to established policies, allowing for the orderly implementation of those policies. Standards require compliance. Guidelines are recommendations important to carrying out policies and standards as well as other activities. Guidelines are advisory rather than mandatory.

University numbered policies in the topical area of information technology are listed in the 7000-series. (http://www.policies.vt.edu/index.php#it). These policies are further classified by the subjects in the list below, along with related policies and standards.

• Acceptable use
• Security and data protection
• Identity management
• Data administration and transparency
• Infrastructure, architecture, and ongoing operations
• Project management, acquisition, and deployment
• Accessibility

POLICIES AND STANDARDS BY SUBJECT

ACCEPTABLE USE
University numbered policies

• 7000 - Acceptable Use and Administration of Computer and Communication Systems
• 4082 - Appropriate Use of Electronic Personnel and Payroll Records
• 4325 - Alternate Work Site and Telework Policy
• 5215 - Sales, Solicitation and Advertising on Campus

Commonwealth of Virginia policies

• Department of Human Resource Management Policy 1.75, Use of the Internet and Electronic Communications Systems

Standards

• Acceptable Use of Information Systems at Virginia Tech

SECURITY AND DATA PROTECTION
University numbered policies

• 7010 - Policy for Securing Technology Resources and Services
• 7025 - Safeguarding Nonpublic Customer Information
• 7030 - Policy on Privacy Statements on Virginia Tech Web Sites
• 7035 - Privacy Policy for Employees' Electronic Communications
• 7105 - Policy for Protecting University Information in Digital Form
• 7200 - University Information Technology Security Program

Standards

• University Information Technology Security Program Standard
• Security Standards for Social Security Numbers
• Standard for Protecting Sensitive University Information Used in Digital Form
• Standard for Securing Web Technology Resources
• Standard for Storing and Transmitting Personally Identifying Information

IDENTITY MANAGEMENT
University numbered policies

• 7040 - Policy and Procedures for Personal Credentials for Enterprise Electronic Services

Standards

• PID Procedures: Enterprise Electronic Login Credentials
• Standard for Personal Digital Identity Levels of Assurance

Guidelines

• Guidelines for Determining the Level of Assurance of Personal Digital Identities

DATA ADMINISTRATION AND TRANSPARENCY
University numbered policies

• 7100 - Administrative Data Management and Access Policy

Standards

• Standard for administrative data management -- Navigate through this standard by searching for keywords or terms (for example--SSN, SCHEV, Hokie Passport)

INFRASTRUCTURE, ARCHITECTURE, AND ONGOING OPERATIONS
University numbered policies

• 7205 - Information Technology Infrastructure, Architecture, and Ongoing Operations

Standards

• Standards for Infrastructure, Architecture, and Ongoing Operations

PROJECT MANAGEMENT, ACQUISITION, AND DEPLOYMENT
University numbered policies

• 7210 - Information Technology Project Management
• 10100 - Policy for the Purchase of Department-Based Computer Systems, Policy 10100, has been withdrawn. See instead the Standard for the Procurement of Information Technology Applications.

Standards

• Project Management Standards and Procedures
• Standard for the Procurement of Information Technology Applications

ACCESSIBILITY
University numbered policies

• 7215 - Information Technology Accessibility

Standards

• Accessibility Standards

VIRGINIA TECH CERTIFICATION AUTHORITY

The Virginia Tech Certification Authority (VTCA) provides a digital certificate service to the campus community. Digital certificates are electronic identity credentials that use encryption to support secure access to a large number of web services and applications. The governing documents for the VTCA are below. Also, see www.pki.vt.edu.

• The Virginia Tech Certification Authority Certificate Policy
• Virginia Tech Root Certification Authority Certification Practices Statement
• Virginia Tech Server Certification Authority Certification Practices Statement
• Middleware Certification Authority
• User Certification Authority Certification Practices Statement

FEDERATED IDENTITY MANAGEMENT

Virginia Tech participates in federated identity management, allowing services provided by other institutions to authenticate and authorize Virginia Tech individuals securely and with appropriate protection of confidentiality.

• InCommon Participant Operational Practices
• Shibboleth Project

• Administration
• Organization
• Services & Status Messages
• Policies
• Publications
• For IT Employees
• Spotlight
• Home - it.vt.edu