Palm Beach State College Board Policy

Title: Information Security Incident Management Policy

Policy Number: 6Hx-18-6.04

Legal Authority: F.S. 1001.64; F.S. 1001.65; FS 501.171; F.S. 282.318

Date Adopted/Amended: Adopted 10/10/2017

 

Purpose

The Palm Beach State College Information Security Incident Response Plan Policy establishes the coordination of College resources in response to information security incidents to minimize the effects caused by such incidents.


Scope

This policy governs the College’s general response, documentation and reporting of information security incidents affecting information technology resources and data. This policy does not include damage to personal computers owned by students, unless their computers contribute to the information security incident defined by the parameters in the Definitions section below.


Definitions

Information Security Incident: A single or series of unwanted or unexpected information security events that have a significant probability of compromising business operations and threatening information security.

Information Security Event: Identified occurrence of a system, service, or network state indicating a possible breach of information security policy or failure of controls.

Incident Response: An action plan for handling the misuse of Information Technology Resources.

 

Policy Statement

This policy authorizes Palm Beach State College to develop an Information Security Incident Response Plan (referred to as Plan) to minimize the effects caused by an information security incident involving an academic or administrative computer system operated by the College, its faculty, students, employees, vendors or others operating such systems on behalf of the College.

The Information Security Office will be responsible for the development and maintenance of the Plan.

The Plan will consist of a well-defined, consistent, and industry standard approach for handling information security incidents.

The Plan will include the development of a Security Incident Response Team that will consist of subject matter experts from various departments throughout the College.

The Plan will include procedures for decision making regarding actions taken for the protection of Palm Beach State College’s information resources from accidental or intentional unauthorized access, disclosure or damage.


References