Information Security

These policies and procedures have been developed, with broad representation from the campus community, to assure that University data assets are secure and protected in compliance with state and federal regulations.

• Cloud computing rules
  Appropriate and approved use of cloud computing
  • Incommon Federation participant operational practices
• Credential Management Rule
• Data access policies
  Policies and request forms for gaining access to secure information
• Data classification policy
  Foundation for WMU's data classification policies
  • WMU Sensitive Data Guide
• Data Collection Through Surveys Policy
• Data security responsibilities
  What you should know and do about data security
• Data wiping policy
  Required before cascading or discarding equipment
• Duo Hardware Token Distribution Guidelines
  Eligibility considerations and request requirements for university-provided hardware tokens for Duo two-factor authentication (2FA)
• E-Commerce
  Electronic commerce at WMU
• European Union privacy regulation
• External Release of University Information Policy
• Family Education Rights and Privacy Act (FERPA)
• HIPAA and Security of Electronic PHI
• Information Technology Acquisition Policy
• Gramm-Leach-Bliley compliance
  Protecting customer's privacy
• Lost or stolen device procedure
  How to proceed if a device containing University data is lost or stolen
• Mobile device security policy
  Policies for mobile computing security
• Payment Card Industry data security
  Technical response for handling credit card payments at WMU
• Remote access policy
  Security requirements for accessing WMU data remotely
• Secure Computing Facility Access Rule
• Social Security Number Policy
• Policies and guidelines to help keep your digital identity safe.
  • Password guidelines
    Guidelines for creating and using a secure password
  • Password policy
    Policy for establishing passwords at WMU
  • European Union privacy regulation