UF Security Policy

UF Security Policy Implications

• UF Security Policy Committee has been working on policies
  covering most areas of computing at UF for 1-2 years

• Most recently, we have tackled applications development

• Primary focus is on sensitive student/patient data

• Policy draft can be found at

  http://net-services.ufl.edu/security/policy/update-it-security-policy.html

• The relevant portions for Applications Development are as follows:

      Application Development
  
          The Unit ISM has the authority and responsibility to ensure secure
      development and deployment of network computer applications intended for
      use at the University of Florida for processing financial data, student
      data, health data, mission critical data, intellectual property or any
      other data that is sensitive, confidential, or protected by law. It is
      incumbent upon the developer to demonstrate to the Unit ISM that they
      follow secure application development guidelines, such as those describe
      in UF Guidelines to Develop Applications for Secure Deployment .
      

• Guidelines draft can be found at

  http://net-services.ufl.edu/security/policy/app-dev.html

• Main IT Policy Page

  http://www.it.ufl.edu/policies