University Policies

Cyber Incident Response Policy

 

Regulated Data Policies

BU Family Educational Rights and Privacy Act (FERPA)

Payment Card Industry Data Security Standard

Universal Identity Theft Policy

BU Gramm-Leach-Bliley Act Safeguarding Program (GLBA)

HIPAA Policy Manual - Privacy and Security of Protected Health Information for BU Healthcare Provider Covered Components

HIPAA Policies for BU Health Plans

HIPAA information for Charles River Campus Researchers

Digital Privacy Statement

IS&T Policies and Standards

Information Security

Data Protection Standards 

Data Protection Standards - Additional Guidance

Destruction of Paper Records and Non-Erasable Media (CD-ROMs, DVDs)

Destruction of Individual Files on Reusable Media

Securely Erasing Entire Reusable Storage Devices

Physically Destroying Reusable Storage Devices

Data Protection Standards 

Data Center Security Standards

Vulnerability Management Standard

Vulnerability Management Procedure

BU Google Drive Security Guide for FERPA

BU Google Apps Acceptable Use and Data Security

BU OneDrive Security Guide

Microsoft 365 Security Policy

Other IS&T Departments 

Learning Management System Policies

BU Desktop Asset Management Policy Guide

Disclaimer for Student and Personal Web Sites

Broadcast Email