Information Security Management and Compliance
Resources
California State University, Long Beach
- Academic Senate Policy, August 1996; “Governing Access To and Use of CSULB Computing Resources”
- CSULB & Family Educational Rights & Privacy Act (FERPA)
- Releasing Student Information (FERPA)
- Library and Academic Technology Services
- A Memorandum from William H. Griffith, Vice President, Administration & Finance
California State University System
- CSU System Information Security Management
- CSU Information Security Policy
- Records Access Manual, Rev. August 2006
- Executive Orders and Memoranda
- HR Coded Memoranda
- HR 2005-16; Information Practices Act & Security Breach Disclosure
- HR 2005-07; Use of Social Security Numbers
- HR 2005-01; Information Practices Act of 1977
- HR 2004-22; HIPAA Regulations – Privacy Compliance for CSU HR
- HR 2004-08; Protecting Confidential Employee Data – Faculty Unit
- HR/PR 2004-01; Records Retention for Employment-Related Records
- HR 2003-05; Protecting Confidential Employee Data
- HR/PR 2003-01; Protection of Confidential Information from CIRS
State of California Legislation and Information
- Information Practices Act; Civil Code s 1798-1798.78t
- "SB 1386" or "AB 1950"; Civil Code s 1798.8-1798.84
- Notification of Security Breach; Civil Code, s 1798.29-1798.84
- Financial Information Privacy Act; Financial Code s 4050-4060
- Privacy & Personal Information Mgmt.; Code of Regulations Title 5, s 42396-42396.56
- CSU Alumni Privacy Disclosure; Education Code s 89090-89090.5
- Employee Access to Information Pertaining to Themselves; Education Code, s 89546
- Confidentiality of Medical Information Act; Civil Code s 56-56.37
- Comprehensive Computer Data Access & Fraud Act; Penal Code 502
- State Records Management Act; Government Code s 14740-14770
- Public Records Act; Government Code s 6250-6270
- Budget Letter 05-32; Encryption on Portable Computing Devices
- Budget Letter 05-08; Classification of Information
- Budget Letter 05-03; Peer-to-Peer File Sharing
- State Administrative Manual, s 4841.3; Classification of Information
- State Administrative Manual, s 4845 IT Security Reporting Requirements
- Executive Order S-16-04; Illegal Downloading of Copyrighted Material
Federal Legislation and Information
- Family Educational Rights and Privacy Act (FERPA)
- Health Insurance Portability & Accountability Act of 1996 (HIPAA)
- Gramm-Leach-Bliley (GLB) Act;
- Standards for Safeguarding Customer Information FTC 16 CFR, Part 314
- Consumer Information and Records Disposal; FTC 16 CFR, Part 682
- Fair and Accurate Credit Transactions Act (FACTA) of 2003
- Sarbanes-Oxley Act
- Digital Millennium Copyright Act and related Copyright Law
Additional Resources
-
California is the first state to have an agency dedicated to promoting and protecting the privacy rights of consumers. Created by legislation enacted in 2000, the Office of Privacy Protection opened in 2001.
-
OnGuardOnline.gov provides practical tips from the federal government and the technology industry to help you be on guard against Internet fraud, secure your computer, and protect your personal information.
-
-
The Federal Trade Commission's (FTC) site provides steps on how to minimize your risk and damage should you become a victim of Identity Theft by utilizing their "Deter, Detect, & Defend" practices.
-
Obtain the FTC brochure "Take Charge: Fighting Back Against Identity Theft".
-
-
-
The Anti-Phishing Working Group (APWG) is the global pan-industrial and law enforcement association focused on eliminating the fraud and identity theft that result from phishing, pharming and email spoofing of all types.
-
Visit the Anti-Phishing Working Group for daily updates on the latest in on-line fraud.
-
-
A nonprofit, nationally respected program dedicated exclusively to identity theft. It provides consumer and victim support and advises governmental agencies, legislators and companies about this evolving and growing crime.
-
The Internal Revenue Service site to assist those who may have become victim of Identity Theft as a result filing their taxes.
-
The U.S. Postal Inspection Service site provides information on mail theft, false change of address, and additional resources relating to consumer fraud. Free DVD's on several identity theft and fraud topics can be ordered and delivered direct.
-
Social Security Administrations site discusses Identity Theft and your Social Security Number.
-
U.S. Department of the Treasury maintains a site with how-to's, links, downloadable brochures, and a free DVD on "Outsmarting the Crooks".
-
The Better Business Bureau website where you may find information on how to best work with businesses when you have become a victim of identity theft.
-
The Direct Marketing Association's webpage that provides information and the means to remove your name from marketing mailers, emails, and phone calls.
-
-
The National Consumers League site provides similar information to the FTC's site but emphasizes the methods of avoiding electronic Identity Theft.
-
http://www.staysafeonline.info/basics/educators.html also contains information for parents and educators on how to keep children safe while on-line.
-
Also consider CNET's article "Keep your Kids Safe Online"
-
-
An FTC site designed for kids to teach about privacy and personal information and how to safely surf the web.
-
An interactive site designed by the National Center for Missing & Exploited Children and Boys & Girls Clubs of America to educate kids and teens on how to stay safe on the internet, Parents, guardians, educators and law enforcement have access to resources for learning and teaching about the dangers children may face on-line.
-
Governors and/or first spouses formed a coalition to bring this interactive site on-line to educate kids on use of the internet and provide parents with information and activities to share with their kids.