IT and Cyber Security Policies, Standards and Regulations

On this site you will find information about the IT and cyber security policies, standards and regulations that support the University's Information Security Policy. The standards detail what the University expects everyone to do, how we all need to behave online and how we can help keep ourselves and the University safe from cyber threats. Most typical members of the University (including students) who are users of standard University IT Facilities will likely only need to read and comply with the first smaller group of standards. While it is not necessary for everyone to read and understand every standard we encourage you to review the standards that are relevant to your role or activities.

Please contact the IT Service Desk if you have any questions or would like support with regards to these standards.

The first group of standards are for everyone including staff and students:

• Staff Regulations for the Use of University IT Facilities or if you are a student, Student Regulations for the Use of University IT Facilities
• Password and Credential Standard
• IT Device Standard

The second group of standards are also applicable to those who perform IT technical activities, selection and procurement of IT Facilities or services (including cloud) or those involved with the administration of IT system user accounts. These standards are only available to internal users and can be found in the Policy Hub on DU Hub. They include:

• Administrative Access on Managed IT Devices Standard
• System Access Control Standard
• System Acquisition, Development and Maintenance Standard

The third and final group of standards is aimed at specialists across the University who administer aspects of University IT Facilities. Again most of these standards are only available to internal users via the Policy Hub on DU Hub. They include:

• Management of IT Vulnerabilities Standard
• Backup Standard
• Encryption Standard
• Reuse and Disposal of Equipment with Data Storage Capability Standard
• Network Security Standard
• Physical Security for Restricted IT Spaces Standard
• Monitoring and Interception Policy