Policy Effective Date March 31, 2005 Date of Last Revision November 3, 2014 Chapter Name Constituting Authority Chapter Number Title 1.1 Policies, Procedures, Standards and Guidelines 1.0 Purpose The purpose of this policy is to define the authority and provide guidance for the creation, maintenance and publishing of policies, procedures, standards and guidelines within the jurisdiction of the Division of Information Technology (DoIT). 2.0 Scope This policy applies to the creation or modification of any DoIT policy, procedure, standard or guideline. 3.0 Policy DoIT policies, along with related procedures, standards and guidelines, will be developed and sponsored through the approval process in accordance with procedure 1.1.P.1 by DoIT personnel designated as the subject matter experts for the relevant function(s). The policy will be designated as “DRAFT” until it successfully completes the approval process. The IT Policy Committee will regularly review policies, procedures, standards and guidelines, and work with appropriate subject matter experts to determine whether revisions are necessary. When revisions are deemed necessary, revised versions of documents will follow procedure 1.1.P.1. 4.0 Responsibility for Implementation The responsibility for the implementation of this policy resides with the CIO and IT Policy Committee. 5.0 Enforcement Any employee found to violate federal or State of Michigan laws, EMU policies, procedures or standards of conduct, will be subject to disciplinary action under University policy. Any student found to violate federal or State of Michigan laws, EMU policies, procedures or standards of conduct, will be subject to disciplinary action under EMU’s Student Code of Conduct. Any suspected violation of state or federal laws will be reported to the appropriate legal authority for investigation. The University reserves the right to protect its electronic resources from threats of immediate harm. This may include activities such as disconnecting an offending computer system from the campus network, terminating a running job on a computer system, or taking other action. 6.0 Definitions Term Policy IT Policy Committee (ITPC) Definition A high-level statement of enterprise beliefs, goals, and objectives and the general means for their attainment for a specified subject area. DoIT policy template is located at PPSG collaboration (SharePoint) Committee appointed by the CIO to administer a consistent and collaborative lifecycle for the development and maintenance of policies, procedures, standards and guidelines for the efficient and effective operation of DoIT and to protect the interests of the University. Refer to Charter for purpose, authority and responsibilities of this committee. IT Policy – 1.1 Policies, Procedures, Standards and Guidelines Form Version 3.0 Page 1 of 2 Procedure Standard Guideline Explains specifics of how the policy and the supporting standards and guidelines will actually be implemented in an operating environment. DoIT procedure template is located at PPSG collaboration (SharePoint). Mandatory activities, actions, rules, or regulations designed to provide policies with the support structure, and specific direction they require to be meaningful and effective. They are often expensive to administer and, therefore, should be used judiciously. DoIT standard template is located at PPSG collaboration (SharePoint). General statements designed to achieve the policy objectives by providing a framework within which to implement procedures. Whereas standards are mandatory, guidelines are recommendations. DoIT guideline template is located at PPSG collaboration (SharePoint). 7.0 Revision History Description Original Revised due to SharePoint; new template Revised – Aric Kirkland 1st Review – Policy Committee 2nd Review – Policy Committee Approved by CIO IT Policy – 1.1 Policies, Procedures, Standards and Guidelines Approval Date March 31, 2005 June 17, 2010 October 16, 2014 October 16, 2014 October 30, 2014 November 3, 2014 Page 2 of 2