Office of the CIO
Queen's University-
Information Systems Security Office
- IT Security Policies
- Standards
-
Information Security Guidelines
-
Electronic Information Security Guidelines
- A1. Antivirus and Anti-Spyware
- A2. Security Updates and Patches
- A3. File Sharing and Remote Access
- A4. Secure Data Deletion and Destruction
- A5. Encryption
- A6. Physical Computer Locking
- A7. Account Passwords
- A8. Operating System Accounts
- B1. Account Hijacking
- B2. Sharing Your Personal NetID Password
- B3. Password Changes
- C1. Physical Location of Servers
- C2. Active Services and Open Ports
- C3. Backups
- C4. Firewalls
- C5. Remote Access
- C6. Physical Location of Network Devices
- D1. System Assessments
- D2. Permissions
- E1. Queen's Employee Requirements
- E2. Third-Party Requirements
- F1. Actual or Suspected Unauthorised Access
- G1. Multifunction Devices
-
Electronic Information Security Guidelines
- Education & Awareness
- Issues & Incidents
- Services
- Templates
E2. Third-Party Requirements
All parties who will have access to the University's personal and confidential information should be required to sign a confidentiality and non-disclosure agreement before they are given access.
How
Department heads and principal investigators should have such third parties review and sign the appropriate Confidentiality and Non-Disclosure Agreement(s).