Information Security Policies & Standards

The protection of information at The Ohio State University is important and often guided by federal laws. Below are the policies and useful resources that govern data security at Fisher College of Business.

Fisher College of Business

Local Administrator Privilege Standard (LAPS)– January 31, 2010 (98K PDF)

LAPS Accountability Statement (91K PDF)

LAPS Training Guide (175K PDF)

The Ohio State University

• Policy on Institutional Data
• Responsible Use of University Computing and Network Resources
• Disclosure or Exposure of Personal Information (PDF)
• Information Technology Security (PDF)
• Other University Policies
• University Computer Security Standard (UCSS)
• Client Computing Security Standard (CCSS)
• Critical Server Security Standard (CSSS)
• Web Service Security Standard (WSSS)
• Database Server Security Standard (DSSS)
• Local Administrative Privilege Standard (LAPS)

State of Ohio

Agency disclosure of security breach of computerized personal information data:

• Ohio Revised Code §1347.12.

Federal

• Family Educational Rights and Privacy Act (FERPA)
  • OSU Policy concerning Privacy and Release of Student Education Records


• Health Insurance Portability and Accountability Act of 1996 (HIPAA)
  • OSU Health Insurance Privacy Policy (PDF)


• Payment Card Industry (PCI) Standards
  • PCI Security Standards Council


• Gramm-Leach-Bliley Act
  • FTC Overview of Gramm-Leach-Bliley Act (PDF)