Access Management

Effective as of 3/31/2022

Introduction

Access Management is the process of identifying, tracking, controlling, and managing user access rights to data, specifically that which pertains to the School of Professional Studies (SPS).

Provisioning of access must include modification of a user’s privileges in the event of a change in that user’s role, and disablement and revocation of a user’s privileges upon leaving SPS either through termination or a transition to a position at another school at the University.

Elevated access privileges must only be provided to users as needed for legitimate business purposes. 

Purpose

The purpose of this policy is to define required access control measures to any relevant school data and to protect the privacy, security, and confidentiality of those resources.

Policy 

This policy applies to those responsible for the management of access to shared SPS-specific data. Such information can be held within a database, application or shared file space.

Data owners must have documented procedures for access control and must be able to produce the documented procedures when required. Evidence of access approval, termination, and disabling must be available when required.

Ratified by Committee on 3/31/2022