This is an old revision of the document!
−Table of Contents
Management Oversight of Privacy and Security Programs
University of Colorado IT Security Program Policy
All data and information resources of the SEHD are subject to University of Colorado's IT Secuirty Program policy, APS-6005. Within the policy it describes the management roles and responsibilies:
>The Program shall be managed and monitored collaboratively by the Chief Information Security Officer(CISO), campusInformation Security Officers, Security Advisory Committee (SAC), and other Universityrepresentatives as appropriate.
University of Colorado Denver Security Management HIPPA Policy
As applicable, the most secure SEHD data are subject to the UCD Security Management HIPPA policy. As stated on the UCDenver HIPPA Website:
>Responsibility for HIPAA compliance is coordinated by the Office of Regulatory Compliance under the direction of the Associate Vice Chancellor for Regulatory Compliance, Dr. Alison D. Lakin, RN, LLB, LLM, PhD.