# 1.1 Information and Technology Resource Security Policy

**Effective Date: October 16, 2026**

To view the contents of this policy please visit: [ASU System Policies & Operating Procedures](https://asusystem.edu/policy/information-and-technology-resource-security-policy-3-08/)

---

Referenced Policies, Standards, and Procedures:

- [Data Security and Classification Policy](https://kb.astate.edu/books/it-policies-procedures/page/13-data-security-and-classification-policy "1.3 Data Classification Policy")
- [Arkansas Act 848](https://arkleg.state.ar.us/Home/FTPDocument?path=%2FACTS%2F2025R%2FPublic%2FACT848.pdf)
- [2.1 Artificial Intelligence Governance Standard](https://kb.astate.edu/books/it-policies-procedures/page/21-artificial-intelligence-governance-standard "2.1 Artificial Intelligence Governance Standard")
- [2.2 Business Continuity and Disaster Recovery Standard](https://kb.astate.edu/books/it-policies-procedures/page/22-business-continuity-and-disaster-recovery-standard "2.2 Business Continuity and Disaster Recovery Standard")
- [2.3 Compliance Framework Implementation and Assurance Standard](https://kb.astate.edu/books/it-policies-procedures/page/23-compliance-framework-implementation-and-assurance-standard "2.3 Compliance Framework Implementation and Assurance Standard")
- [2.4 Enterprise Resource Planning (ERP) Standard](https://kb.astate.edu/books/it-policies-procedures/page/24-enterprise-resource-planning-erp-standard "2.4 Enterprise Resource Planning (ERP) Standard")
- [2.5 Network Security Standard](https://kb.astate.edu/books/it-policies-procedures/page/25-network-security-standard "2.5 Network Security Standard")
- [2.6 Risk Assessment and Vendor Management Standard](https://kb.astate.edu/books/it-policies-procedures/page/26-risk-assessment-and-vendor-management-standard "2.6 Risk Assessment and Vendor Management Standard")
- [2.7 Technology Resource Management Standard](https://kb.astate.edu/books/it-policies-procedures/page/27-technology-resource-management-standard "2.7 Technology Resource Management Standard")
- [2.8 Technology Resource Physical and Environmental Security Standard](https://kb.astate.edu/books/it-policies-procedures/page/28-technology-resource-physical-and-environmental-security-standard "2.8 Technology Resource Physical and Environmental Security Standard")
- [2.9 Technology Resource User Education Standard](https://kb.astate.edu/books/it-policies-procedures/page/29-technology-resource-user-education-standard "2.9 Technology Resource User Education Standard")
- [2.10 Vulnerability and Patch Management Standard](https://kb.astate.edu/books/it-policies-procedures/page/210-vulnerability-and-patch-management-standard "2.10 Vulnerability and Patch Management Standard")
- [2.11 Logical Access Security Standard](https://kb.astate.edu/books/it-policies-procedures/page/211-logical-access-security-standard "2.11 Logical Access Security Standard")
- [2.12 Records Retention Standard](https://kb.astate.edu/books/it-policies-procedures/page/212-records-retention-standard "2.12 Records Retention Standard")