Search4 Results

Bowdoin's Written Information Security Program (WISP) establishes a comprehensive, institution-wide framework to identify and protect against information security risks and to comply with applicable regulations and standards, including the NIST Cybersecurity Framework, PCI-DSS, GLBA, FERPA, HIPAA, and Maine and Massachusetts data-protection laws. It defines the administrative, technical, and physical safeguards the College uses to protect sensitive information.

This policy establishes requirements for uniquely identifying, authenticating, and authorizing all users of Bowdoin IT resources, covering account types, account eligibility and expiration, authentication methods, and access-control models. It applies to students, faculty, staff, contractors, and any individual or entity using a Bowdoin IT resource.

Defines the responsibility of all users of Bowdoin's network and computer resources to use and protect those resources appropriately and to respect the rights of others, in support of the College's teaching, learning, and research missions. It applies to everyone who uses College computing and network resources.

Classifies all College data into defined access levels and requires that data not be accessed without proper authorization, in order to protect the College's information resources from unauthorized access or damage while supporting legitimate academic use. It applies to all College data and to anyone who accesses or manages it.