Information Security policies
Information Security is defined as the preservation of confidentiality, integrity and availability of information.
Information Security Policy
The University's Information Security Policy
If this document cannot be read by your assistive software, you can request an accessible version by emailing web@cardiff.ac.uk. Please include the assistive tools you use and the format you require.
This policy provides the overarching approach to the management of information security at Cardiff University and is the master policy document of the information security framework. All related policies shall be consistent with this policy.
Related policies
| Name | Type | Last updated |
|---|---|---|
| Information Security Specification (Systems Level) Policy | 11/02/2021 | |
| Information Classification and Handling Policy | 25/01/2021 | |
| IT Systems Password Policy | 25/01/2021 | |
| Information Security Incident Management Policy | 25/01/2021 | |
| Information Security Framework Review Policy | 25/01/2021 | |
| Information Security Framework Testing Policy | 25/01/2021 | |
| Information Security Metrics Gathering Policy | 25/01/2021 | |
| Information Security Remote and Mobile Working Policy | 25/01/2021 | |
| Information Security Training Policy | 25/01/2021 | |
| University IT Account Entitlement and Rights Assignment Policy | 25/01/2021 | |
| Records management policy | 3/12/2021 |