Information Technology Policy + Security
The following are policies and standards for the School of Architecture and the University of Virginia more broadly, which apply to all employees - faculty and staff - and include equipment, software, data, and the ways in which we all work with these. Some of these policies will also apply to students, especially students who work for the School in an SIA, SRA, or SSA position or related activities.
These policies are required and apply to everyone, as established and supported by the Dean's office.
School of Architecture Policies and Standards
A-School specific standards, expectations, and implementations of University policy.
- SARC Faculty and Staff Computer Eligibility and Standard
- Equipment Ownership
- Faculty and Staff Computer Levels Definition
- Standard Installations on Faculty and Staff computers
UVA Information and Data Security Policies and Standards
Standing UVA policy that apply across all of UVA, and sometimes State of Virginia, with sometimes Federal connections.
- Information Security Awareness – Responsible Computing and your Expectations
- Security of Network Connected Devices Standard
- University Data Protection Standards
- Acceptable Use of the University's Information Technology Resources
- Information Security of University Technology Resources
- Data Protection
- FERPA (Educational records) Data definitions and policy
Research Data Security
A developing area covering requirements for protection of research operations.
File Storage and Sharing / Security of Data Storage
What and where you can and cannot store or send / share / transmit certain types of data.
- UVA Box and UVA OneDrive / SharePoint
- Data Protection
- Student Work Intellectual Property (they own it, not you)
Records Retention and Destruction
Policies, Standards, and Guidelines on how long to keep certain information and how to properly and legally destroy it.
- UVA Records Management Office website
- Electronic Records Management – Requirements, approaches, and training videos
- FOIA (Freedom of Information Act) policies and requests
Purchasing, Contracts, Terms and Conditions
For equipment, software, and web and cloud services, including how click-throughs apply to terms and liability. (short answer, you are liable unless you use an existing vendor)
- UVA Policy - Purchase of Goods and Services
- UVA Policy - Signatory Authority
- UVA Purchasing - UVA Terms and Conditions – applies to registered vendors only
- UVA Purchasing - Data Protection Addendum - applies to registered vendors only