# Policies Browse Board approved IT policies that define requirements, responsibilities, and operational practices across the organization. These resources help ensure transparency, accountability, and alignment with regulatory compliance. # 1.1 Information and Technology Resource Security Policy **Effective Date: October 16, 2026** To view the contents of this policy please visit: [ASU System Policies & Operating Procedures](https://asusystem.edu/policy/information-and-technology-resource-security-policy-3-08/) --- Referenced Policies, Standards, and Procedures: - [Data Security and Classification Policy](https://kb.astate.edu/books/it-policies-procedures/page/13-data-security-and-classification-policy "1.3 Data Classification Policy") - [Arkansas Act 848](https://arkleg.state.ar.us/Home/FTPDocument?path=%2FACTS%2F2025R%2FPublic%2FACT848.pdf) - [2.1 Artificial Intelligence Governance Standard](https://kb.astate.edu/books/it-policies-procedures/page/21-artificial-intelligence-governance-standard "2.1 Artificial Intelligence Governance Standard") - [2.2 Business Continuity and Disaster Recovery Standard](https://kb.astate.edu/books/it-policies-procedures/page/22-business-continuity-and-disaster-recovery-standard "2.2 Business Continuity and Disaster Recovery Standard") - [2.3 Compliance Framework Implementation and Assurance Standard](https://kb.astate.edu/books/it-policies-procedures/page/23-compliance-framework-implementation-and-assurance-standard "2.3 Compliance Framework Implementation and Assurance Standard") - [2.4 Enterprise Resource Planning (ERP) Standard](https://kb.astate.edu/books/it-policies-procedures/page/24-enterprise-resource-planning-erp-standard "2.4 Enterprise Resource Planning (ERP) Standard") - [2.5 Network Security Standard](https://kb.astate.edu/books/it-policies-procedures/page/25-network-security-standard "2.5 Network Security Standard") - [2.6 Risk Assessment and Vendor Management Standard](https://kb.astate.edu/books/it-policies-procedures/page/26-risk-assessment-and-vendor-management-standard "2.6 Risk Assessment and Vendor Management Standard") - [2.7 Technology Resource Management Standard](https://kb.astate.edu/books/it-policies-procedures/page/27-technology-resource-management-standard "2.7 Technology Resource Management Standard") - [2.8 Technology Resource Physical and Environmental Security Standard](https://kb.astate.edu/books/it-policies-procedures/page/28-technology-resource-physical-and-environmental-security-standard "2.8 Technology Resource Physical and Environmental Security Standard") - [2.9 Technology Resource User Education Standard](https://kb.astate.edu/books/it-policies-procedures/page/29-technology-resource-user-education-standard "2.9 Technology Resource User Education Standard") - [2.10 Vulnerability and Patch Management Standard](https://kb.astate.edu/books/it-policies-procedures/page/210-vulnerability-and-patch-management-standard "2.10 Vulnerability and Patch Management Standard") - [2.11 Logical Access Security Standard](https://kb.astate.edu/books/it-policies-procedures/page/211-logical-access-security-standard "2.11 Logical Access Security Standard") - [2.12 Records Retention Standard](https://kb.astate.edu/books/it-policies-procedures/page/212-records-retention-standard "2.12 Records Retention Standard") # 1.2 Appropriate Use of Information and Technology Resources Policy **Effective Date: March 4, 2011 Revised Date: October 16, 2026** To view the contents of this policy please visit: [ASU System Policies & Operating Procedures](https://asusystem.edu/policy/appropriate-use-of-information-technology-resources-policy-3-05-updated/) --- Referenced Policies, Standards, and Procedures: - [Arkansas Act 504](https://www.arkleg.state.ar.us/Home/FTPDocument?path=%2FACTS%2F2023R%2FPublic%2FACT504.pdf) # 1.3 Data Security and Classification Policy **Effective Date: October 16, 2026** To view the contents of this policy please visit: [ASU System Policies & Operating Procedures](https://asusystem.edu/policy/data-security-and-classification-policy-3-07/) --- Referenced Policies, Standards, and Procedures: - [Cloud, Network, and Local Storage Standard](https://kb.astate.edu/books/it-policies-procedures/page/42-cloud-network-and-local-storage-guidelines "4.2 Cloud, Network, and Local Storage Guidelines") - [Logical Access Security Standard](https://kb.astate.edu/books/it-policies-procedures/page/211-logical-access-security-standard "2.11 Logical Access Security Standard") - [Endpoint Management Standard](https://kb.astate.edu/books/it-policies-procedures/page/27-technology-resource-management-standard "2.7 Technology Resource Management Standard") - [AI Governance Standard](https://kb.astate.edu/books/it-policies-procedures/page/21-artificial-intelligence-governance-standard "2.1 Artificial Intelligence Governance Standard") # 1.4 Artificial Intelligence Governance Policy **Effective Date: October 16, 2026** To view the contents of this policy please visit: [ASU System Policies & Operating Procedures](https://asusystem.edu/policy/artificial-intelligence-governance-policy-3-06/) --- Referenced Policies, Standards, and Procedures: - [Data Security and Classification Policy](https://kb.astate.edu/books/it-policies-procedures/page/13-data-security-and-classification-policy "1.3 Data Classification Policy") - [Arkansas Act 848](https://arkleg.state.ar.us/Home/FTPDocument?path=%2FACTS%2F2025R%2FPublic%2FACT848.pdf) - [Artificial Intelligence Governance Standard](https://kb.astate.edu/books/it-policies-procedures/page/21-artificial-intelligence-governance-standard "2.1 Artificial Intelligence Governance Standard")