Enterprise IT Policy Project

The Enterprise IT Policy Project is an overhaul of the Information = Technology=20 policies of all four campuses, creating a single enterprise-wide set of = IT=20 policies. Team members have worked on this project to remove or revise = outdated=20 policies, consolidate or streamline current policies, adapt the policies = to an=20 enterprise format, and develop new policy language as needed. Campuses = may=20 develop and maintain separate campus-specific procedures to implement = the=20 policies as needed.

Below are the current proposed policy DRAFTS for vetting and further=20 development among constituencies of all four campuses. We welcome input = and=20 discussion from everyone to help us refine these drafts. After the = drafts have=20 been vetted and refined they will be presented to University Council for = public=20 comment period prior to voting.

Project Status

Policy drafts developed by team and vetted by key = stakeholders.
Policy drafts posted for constituent and = executive=20 review, comment, and revision period.
Policy drafts submitted to University = Council.
Public comment period and revisions as needed.
University Council approval.

Please send comments or questions to anne.milkovich@montana.edu= or=20 contact individual team members:

Billings
Michael=20 BarberChief Information Officer
Mari = JaynesManager, Technology Services & = Support
Linda=20 WhamManager, Institutional Research &=20 Analysis
Great Falls
Ken=20 WardinskyChief Technology Officer

Bozeman
Adam=20 EdelmanChief Security Officer
Anne=20 MilkovichIT Business Director
Northern
Rock=20 BrownIT Services Director

Enterprise IT Policy PROPOSED DRAFTS FOR VETTING

Proposed revisions to these drafts are recorded in the Enterprise=20 IT Policy Revision Control document. View the Bozeman=20 Policy Index to see the correlation between the old Bozeman policies = and the=20 new Enterprise policies, as well as how the Enterprise policies relate = to Board of = Regents=20 policies.

Policy Name	Description	Revision Date
Enterprise=20 Alleged Copyright Infringement Response	Defines handling of and gives instructions for complaints of = copyright=20 infringement. Updated to enterprise format from previous policy of = same=20 name.	04/24/2012
Enterprise=20 Data Stewardship	Defines roles and responsibilities for handling, storing, = managing,=20 accessing, and utilizing University data to maintain appropriate = security=20 and confidentiality. Updated to enterprise format.	04/24/2012
Enterprise=20 IT Acceptable Use	Defines appropriate and prohibited uses of = University=20 technology by all users: students, faculty, staff, and patrons. = Updated to=20 enterprise format from previous policy of same name; includes new = or=20 consolidated language from standards and guidelines.	04/24/2012
Ente= rprise=20 IT Asset Management	Authorizes central IT departments to track technology assets and = requires user compliance with asset tracking and management. New = proposed=20 policy.	04/24/2012
Enter= prise=20 IT Finance	Authorizes central IT departments to establish and manage=20 infrastructure funds and chargeback models. Updated to enterprise = format=20 and consolidated from previous policies.	04/24/2012
En= terprise=20 IT Governance	Establishes four-campus IT governing body and enterprise-wide=20 strategic planning requirements of central IT departments and = distributed=20 IT units. Adapted from previous strategic planning language with = new=20 language defining proposed four-campus IT governing body for=20 enterprise-wide governance.	04/24/2012
E= nterprise=20 IT Resource Management	Requires prioritization of IT resources in alignment with = University=20 strategic directives as determined by the four-campus IT governing = body=20 defined in the Enterprise IT Governance policy. Defines roles and=20 responsibilities to facilitate that requirement. Revised from = previous IT=20 Resource Management policy and updated to enterprise format; = includes new=20 language referencing proposed four-campus governing body and = project=20 management office.	04/24/2012
Enterprise=20 IT Security Incident Response Handling	Establishes responsibility and accountability for addressing = computer=20 security incidents so that each incident is handled and reported = in=20 accordance with applicable law and in a manner that best protects = the=20 University. Updated to enterprise format from previous policy. =	04/24/2012
Enterprise=20 Technology Management	Establishes appropriate practices for management of technology=20 resources by IT practitioners. References existing = network-attached device=20 and use standards (Bozeman). New proposed policy that separates IT = practitioner practices from end user practices found in the = Enterprise IT=20 Acceptable Use policy.	04/24/2012