Information Security Committee (ISC)

Mission Statement

Our mission is to ensure the SUNY Info Security Policy is being followed. As well as to ensure all info is secure and private. The committee will do the tasks below:

• To obtain and maintain compliance with the State University of New York’s Information Security Policy.
• To conduct outreach and training for new info security policies, procedures and awareness programs.
• To provide info and support physical security systems policies and procedures.
• To provide feedback on behalf the campus community on info security projects and or initiatives.

Committee members also serve as a security awareness resource for their workers to contact with questions. 

• Membership & Contact Info
• iSec Committee Bylaws

Regulatory Compliance

• Information Security Program 
• Information Management and Cyber Security Policy
• Gramm-Leach-Bliley Act 
• FERPA (Family Educational Rights and Privacy Act) 
• HIPAA (Health Insurance Portability and Accountability Act) 
• FISMA (Federal Information Security Management Act)
• SUNY Information Security Policy #6900
• SUNY Information Security Guidelines: Campus Programs & Preserving Confidentiality #6608
• New York State Information Technology Policy: Information Security NYS-P03-002
• NIST Cyber Security Framework
• NIST Special Publication 800-53 
• NIST Special Publication 800-171

Resources

• PCI-DSS Sub-Committee
• Fredonia Secure the Human Reference