====== Incident Response and Incident Response Mitigation ======

===== Applicable University of Colorado Denver Policies =====

==== University of Colorado IT Security Program Policy ====

All data and information resources of the SEHD are subject to University of Colorado's IT Secuirty Program policy, [[https://www.cu.edu/ope/aps/6005|APS-6005]].

==== University of Colorado Denver HIPPA Policy ====

As applicable, the most secure SEHD data are subject to the UCD Security Incidents [[http://www.ucdenver.edu/research/Research Administration Documents/9.2 Security Incidents.pdf|HIPPA Policy 9.2]].

==== University of Colorado Denver Incident Response Process ====

{{https://wiki.cu.studio/_media/policy/data_privacy/incident_response_swimlane_process_diagram.jpg?nolink&1547x1000|incident_response_swimlane_process_diagram.jpg}}