Best Practices in Information Security for Employees

This guide outlines the best practices in information security specifically designed for employees of East Carolina University. It emphasizes the importance of protecting university information, which is considered a strategic asset vital for achieving institutional objectives. The document details the responsibilities of employees in safeguarding information, highlighting that all employees, including staff, faculty, and volunteers, must adhere to these standards. It provides a structured approach to information security, including specific practices such as staying informed about security responsibilities, reporting security concerns, and implementing safe computing practices. Additionally, the guide addresses the need for strong password management and the proper disposal of sensitive information. It also notes that compliance with federal regulations may require additional precautions. The standards are aligned with ISO 27002 and are tailored to the unique environment of the university, ensuring that all employees understand their roles in maintaining information security.