UW Medicine Information Security Policies

Individual security policies, standards, and guidelines are available below in HTML and PDF formats. You may also download the entire document set as one PDF file. If you keep electronic or printed copies of these documents locally for reference, please remember that new versions are released periodically, rendering previous versions obsolete.

• SEC-01 Information Security Policy (view as PDF)
  • SEC-01.01 Management of Information Security Policies, Standards, Guidelines, and Procedures (view as PDF)
  • SEC-01.02 Information Security Policy Exemption Procedure (view as PDF)
• SEC-02 Information and Information System Classification Policy (view as PDF)
• SEC-03 Workforce Information Security Policy (view as PDF)
  • SEC-03.01 Workspace Information Security Standard (view as PDF)
  • SEC-03.02 Email Standard (view as PDF)
• SEC-04 Physical and Environmental Information Security Policy (view as PDF)
  • SEC-04.01 Server System Location Standard (view as PDF)
  • SEC-04.02 Physical Security Standard (view as PDF)
• SEC-05 Communications and Operations Management Policy (view as PDF)
  • SEC-05.01 Media Handling Standard (view as PDF)
  • SEC-05.02 Wireless Networking Standard (view as PDF)
  • SEC-05.03 Encryption Standard (view as PDF)
    • SEC-05.03.01 Encryption Guideline (view as PDF)
  • SEC-05.04 Minimum Workstation and Server Information Security Standard (view as PDF)
  • SEC-05.05 Other Networked Devices: Minimum Information Security Standard (view as PDF)
  • SEC-05.06 PDA and Smart Phone Usage in the UW Medicine Environment: Minimum Information Security Standard (view as PDF)
• SEC-06 Identity and Access Management Policy (view as PDF)
• SEC-07 Business Continuity Policy (view as PDF)
  • SEC-07.01 Information Security: Business Impact Analysis Guideline (view as PDF)
  • SEC-07.02 Server Disaster Recovery/Business Continuity Standard (view as PDF)
• SEC-08 Information Security and Privacy Audit Policy (view as PDF)
• SEC-09 Information Security Risk Management Policy (view as PDF)
  • SEC-09.01 Risk Assessment Guideline (view as PDF)
• SEC-10 Policy for Responding to Information Security Incidents and Complaints (view as PDF)
• SEC-REF_UW Medicine Security Program Glossary of Terms (view as PDF)