| ASU Enterprise Technology

Read more about Vulnerability Management Security Standard

The purpose of this standard is to improve the security of ASU web applications and network assets by addressing threat modeling and security testing, web application criticality and the associated review process, the web application sign-off/approval process and recommended guidelines.

Get the PDF.

Read more about System Audit Requirements

This document contains requirements for logging activities on High Risk and Confidential systems.

Get the PDF.

Read more about Secure Development Lifecycle

This standard outlines security related responsibilities and expectations for software development that occurs at the University.

Get the PDF.

Read more about Secure Web Development Standard

This standard establishes guidelines and standards for the preservation of the confidentiality, integrity and availability of University information resources associated with websites.

Get the PDF.

Read more about IT Risk Assessment Standard

This document outlines ASU’s approach for identifying and analyzing risk areas and taking corrective action in an effort to provide the most secure environment possible.

Review the standard here.

Read more about Privileged Accounts Standard

This document establishes guidelines for UTO to ensure the secure use of system accounts and administrator or privileged access rights.

Get the PDF.

Read more about Patch Management Standard

The Patch Management Standards describes basic patch management expectations for University systems.

Get the PDF.

Read more about Password Standard

Documentation of ASU’s standard regarding the changing of passwords that are used to grant access to University resources.

Get the PDF.

Read more about Peer-to-Peer (P2P) File Transfer & Copyright Infringement Standard

This document describes acceptable and prohibited uses of P2P software and protocols on ASU's network, University sanctions for prohibited uses, and responsibilities for compliance.

Get the PDF.

Read more about Incident Response Standard

This standard outlines the workflow, roles and responsibilities, and escalation provisions with respect to identifying and handling information security incidents at Arizona State University.

Get the PDF

Subscribe to