Washington State University, through cross functional collaboration across academic, administrative, and technology units, modernized the Information Technology and Security policies in the University Policies and Procedures Manual (UPPM) Chapter 87. The updated chapter includes aligned standards and procedures that provide a clearer, more consistent framework for managing institutional technology and information security.
What’s Changed
- Modernized governance framework: Chapter 87 has been updated to reflect a consistent, risk-based approach to information technology and security governance across the university.
- Aligned standards and procedures: Policies are now paired with clearer standards and procedures to support consistent implementation and oversight.
- Strategic risk management: The updates emphasize proactive identification, assessment, and management of cybersecurity risk rather than ad hoc or reactive responses.
- Phased release: This effort represents the first half of the updated policies, with additional policies forthcoming.
New and Updated UPPM Chapter 87 Policies
New and updated UPPM Chapter 87 policies are accessible via the following links:
- New Policies
- UPPM 87.03: Account, Identity, and Authentication Management
- UPPM 87.23: Control Exception
- UPPM 87.32: Business Applications Security
- UPPM 87.33: Encryption Security
- UPPM 87.42: Anti-Malware
- UPPM 87.51: Remote Access
- UPPM 87.62: Physical Security
- UPPM 87.65: Software Development
- UPPM 87.72: System Decommission and Data Destruction
- Revised Policies
- UPPM 87.05: Access Control and Authorization
- UPPM 87.10: Electronic Device (Endpoint) Security
- UPPM 87.12: Network Security
- UPPM 87.40: System and Information Integrity
- UPPM 87.53: Data Protection and Classification
Many units already operate in alignment with the updated policies. Formalizing them within UPPM provides consistency, accountability, and shared understanding across WSU, and supports coordinated implementation and oversight.
Thank you for your continued partnership in maintaining a secure, resilient, and well governed technology environment at Washington State University.