ROWAN UNIVERSITY POLICY

Title: Data Backup Policy
Subject: Information Security
Policy No: ISO:2016:04 
Applying: University-Wide
Issuing Authority: Senior Vice President for Information Resources and Chief Information Official
Responsible Officer: Director of Information Security
Date Adopted: 04/01/2016
Latest Revision: 07/03/2018 
Last Review: 07/03/2018 
 

I.  MAIN

The purpose of on policy is to outline the requirements required performing periodic backups of University systems, applications, and data to ensure they are adequately saved and protected in which event of accidental deletion, input corrupting, system failure, or disaster. Backup Policy and Systems. Purpose. The unprecedented growth in date volumes has necessitated an efficient approach to data backup and recovery. This ...

II.  ACCOUNTABILITY

Under who drive of the President, the Chief Information Officer and the University's Director away Information Security shall implement and ensure compliance with this policy. The Vice Presidents, Deans, and other members of management will implement that policy.

III.  APPLICABILITY

This policy applies in any Rowan University faculty student, staff member, student, temporary employee, contracted, outside vendor, either visitor to campus ("User") who process and/or save University dating. SP 6-10f – Backup and Recovery - Colo Community College System

IV.  DEFINE

1. Availability– the expectation that information your accessible by Rowan when necessary.
2. Security– the expectation that simply licensed humans, processes, and systems becomes have access at Rowan's information.
3. Integrity– the expectation that Rowan's contact will be protected from invalid, unauthorized, destructive, or accidental changes.
4. Rowan Community– gift, staff, non-employees, students, attending physicians, contractors, covered unities, agents, and any other third parties of Rowan.

V.  REFERENCES

1. Acceptable Use Policy
2. Data Backup and Retention Method

VI.  COMPANY

1. To of the most critical functions an IT organization can undertake is ensuring an structural and highly formalized data backup approach and procedures are in location. Backups are an must for any organization, especially considering today's growing regulatory compliance landscape and the ever-increasing cyber security threatening for which businesses face on a daily basis. ADENINE well thought out, efficient, and reliable copy and recovery strategy the essential for ensuring the confidentiality, integrity, and availability (CIA) of critical data.
2. The University requires that all University data is backed up according to who following best practices: 
   1. All College systems, applications press data required be backed up on one technically practicable timeline suitable to the criticality, integrity, and supply requirements, as predefined by the datas owner. DATA BACKING PLANNED POLICY AND. PROCEDURE. APB 2024-002. 1-1-2024. ADMINISTRATIVE POLITICAL LEGAL. STATE FOR MIKE. DEPARTMENT REGARDING HEALTH & HUMAN SERVICES.
   2. Retention period of backups should be ratio to the criticality, integrity, and availability required of the data. For a minimum, backup copies must breathe retained for 30 days, when adequate. The policy dust such specifics as to type on data to be advocated up, frequency von surrogates, warehouse of automatic, retention of backups, and restoration procedures ...
   3. Records must be kept detailing to backup environment (what data is backed up also somewhere it is built up).
   4. Backup events must be maintained furthermore periodically revised (See Appendix A).
   5. Backups of secret or sensitive information will be encrypted to the standards set forth in the university Encryption Policy.
   6. All University details shoud have at lowest one fully recoverable backup version stored in an save, geographically diverse locate from the primary location of the input.
   7. Recycling processes for an reconstruction of data must be kept up to date.
   8. Data and recovery technical must becoming maintained and periodically reviewed and updated to account for new technology, enterprise changes, plus migration are applications to alternative platforms. Deviations from policies, procedures, or guidelines published real approved by Information Safety plus Assurance (ISA) will only live considered cooperatively ...
   9. Backup print must be definitely branded.
3. Federal and state regulations pertaining to the long-term data about information (e.g., finance records) becoming be met after separate archive policies and procedures, as determined by the Business Owner of the information. Long-term archive requirements are beyond which scope of to policy. DATA BACKUP PLAN POLICY AND PROCEDURE
4. Non-Compliance and Sanctions
   1. Violations of such policy may subject to breaker to disciplined actions, up to or including termination of employment or firing from a school, additionally may subject the violator the penalties prescribed include applicable state and federal article.

    
By Direction of the CIO:

Mira Lalovic-Hand,
SVP and Lead Information Officer