IT Security Standards and Guidelines

Following is a listing of IT Security Standards and Guidelines, as well as other security-related recommended practices and current laws with IT security requirements.

Emory University maintains a Policies and Procedures website which includes a number of IT-related policies including the Information Technology Conditions of Use Policy (Policy 5.1).

Security Standards

• Banners/System Notice Standards

• Desktop Security Configuration & Management Standards

• Disposal of Computing Equipment Standards

• Network Security Incident Response Process

• Remote Access Standards

• Server Security & Configuration Standards

• Standards for Social Security Number Use

• System Scanning Standards

• System Timeout Standards

• Unattended Workstation Standards

Security Guidelines

• Password Guidelines

• Physical & Environmental Security Guidelines

Recommended Security Practices and Requests

• Network Vulnerability Scanning Self-Service

• Peer-To-Peer (Kazaa, Gnutella, Others) - Recommended Security Practice

• Working from Home - Minimum Security Requirements

Current Laws with IT Security Requirements

• Family Education Rights and Privacy Act (FERPA)

• Gramm-Leach-Bliley Act (GLBA)

• Health Insurance Portability and Accountability Act of 1998 (HIPAA)