Differences

This shows you the differences between two versions of the page.

--- policy:data_privacy:management_and_oversight [2019/05/16 20:56] – tonyromero
+++ policy:data_privacy:management_and_oversight [2019/06/05 19:28] (current) – [University of Colorado Denver Security Management HIPPA Policy] tonyromero
@@ Line 3: / Line 3: @@
 ==== University of Colorado IT Security Program Policy ====
-All data and information resources of the SEHD are subject to University of Colorado's IT Secuirty Program policy, [[https://www.cu.edu/ope/aps/6005|APS-6005]]. Within the policy it describes the management roles and responsibilies:
+All data and information resources of the SEHD are subject to University of Colorado's IT Security Program policy, [[https://www.cu.edu/ope/aps/6005|APS-6005]]. Within the policy it describes the management roles and responsibilities:
-<font 14px/Arial,Helvetica,sans-serif;;inherit;;inherit>The Program shall be managed and monitored collaboratively by the Chief Information Security Officer</font><font inherit/inherit;;inherit;;inherit>(CISO), campus</font><font inherit/inherit;;inherit;;inherit>Information Security Officers</font><font inherit/inherit;;inherit;;inherit>, Security Advisory Committee (SAC), and other University</font><font inherit/inherit;;inherit;;inherit>representatives as appropriate.</font>
+> The Program shall be managed and monitored collaboratively by the Chief Information Security Office (CISO), campus Information Security Officers, Security Advisory Committee (SAC), and other University representatives as appropriate.
-==== University of Colorado Denver Security Management HIPPA Policy ====
+==== University of Colorado Denver HIPPA Policy ====
-As applicable, the most secure SEHD data are subject to the UCD Security Management HIPPA policy. As stated on the [[http://www.ucdenver.edu/research/ORC/HIPAA/Pages/WhatIsHIPAA.aspx|UCDenver HIPPA Website]]:
+As applicable, the most secure SEHD data are subject to the UCD HIPPA policy. As stated on the [[http://www.ucdenver.edu/research/ORC/HIPAA/Pages/WhatIsHIPAA.aspx|UCDenver HIPPA Website]]:
-<font 14px/Arial,Helvetica,sans-serif;;inherit;;inherit>Responsibility for HIPAA compliance is coordinated by the Office of Regulatory Compliance under the direction of the Associate Vice Chancellor for Regulatory Compliance, Dr. Alison D. Lakin, RN, LLB, LLM, PhD.</font>
+> Responsibility for HIPAA compliance is coordinated by the Office of Regulatory Compliance under the direction of the Associate Vice Chancellor for Regulatory Compliance, Dr. Alison D. Lakin, RN, LLB, LLM, PhD.
+==== SEHD Secure Data Server ====
+The SEHD Secure Data Server's security program is monitored collaboratively by the SEHD Data Governance Manager, a representative from the SEHD Assessment Office, and a representative from the SEHD IT Office.