Search100 Results

This standard defines the minimum security controls for Information Technology systems in use at UNC-Chapel Hill including personal and University-owned devices. Units within the University may apply stricter controls to protect information and systems in their areas of responsibility. The standard applies to each UNC-Chapel Hill Constituent, student, employee, or other for any covered system under their control.

This Policy prohibits (i) all forms of Discrimination and Harassment based on Protected Status; (ii) Sexual Violence and Sexual Exploitation, (iii) Stalking and Interpersonal Violence, which need not be based on an individual’s Protected Status; (iv) Complicity for knowingly assisting in an act that violates this Policy; and (iv) Retaliation against an individual because of their good faith participation in the reporting, investigation, or adjudication of violations of this Policy.

This Policy is promulgated for the purpose of implementing the Board of Governors’ (BOG) Policy on Conflicts of Interest and Commitment Affecting Faculty and Non-Faculty EHRA Employees.

To provide guidance for individuals and units on responsibilities for managing suppliers of Information Technology (IT) services, software, and systems. To manage risk to university information and other assets by creating clearer communication and understanding between vendors and University staff. To define required security controls monitoring activities.

To describe minimum requirements for members of the University of North Carolina at Chapel Hill ("University" or "UNC-Chapel Hill") experiencing a concern that might indicate a Possible Information Security Incident. To specify Information Security Incident authority and role requirements for Information Security Incident Handlers and Information Security Liaisons.

Failure to protect information through the use of strong passwords/pass-phrases and additional authentication methods may result in incidents that expose sensitive information and/or impact mission-critical UNC-Chapel Hill services. This Standard outlines minimum requirements for authentication mechanisms for information systems under the University's control and password strength and other requirements for accounts on University systems and accounts that use University data.

This standard is intended to represent a minimum baseline for managing vulnerabilities on any UNC-Chapel Hill system required by the UNC-Chapel Hill Information Security Controls Standard to be scanned for vulnerabilities.

Protected Health Information (PHI) and Sensitive Information (SI) that is transmitted or received on behalf of the University of North Carolina at Chapel Hill by any Constituent must be encrypted in accordance with this Standard, which details required minimum encryption standards for University Tier 2 and Tier 3 information. Particular transmissions may require a heightened encryption requirement or consideration of additional legal or policy requirements.

The University strives to create a welcoming and safe environment for all individuals. Consistent with this goal, the University will not employ individuals or appoint unpaid affiliates with prior non-expunged criminal convictions, arrests, charges or driving records (when applicable) who are determined to pose an unacceptable safety risk to the University or its employees, students and visitors.

This policy has three main goals: (1) To meet the needs of our students and other stakeholders; (2) To facilitate transparency and accountability about our performance to the public, and (3) To establish clear and equitable expectations and guidelines about the distribution of work among faculty members.

The UNC Adams School of Dentistry has a legal and ethical responsibility to safeguard patient information. This responsibility includes ensuring that devices storing Protected Health Information ("PHI") or other Sensitive Information are properly encrypted and are serviced by an appropriate vendor. The purpose of this Policy is to ensure that all Computing Devices used by employees will meet institutional security requirements.

The Adams School of Dentistry (ASOD) email system is an essential means of communication to facilitate the business of the School and its faculty, staff, and students. The purpose of this Standard is to ensure that the email and calendaring systems are used in the most appropriate manner.

The UNC Adams School of Dentistry has a legal and ethical responsibility to safeguard patient information. This responsibility includes ensuring that devices storing Protected Health Information ("PHI") or other Sensitive Information ("SI") are properly encrypted and are serviced by an appropriate vendor. The purpose of this Policy is to ensure that all Smartphones used by personnel will meet institutional security requirements.

This Procedure provides the requirements and guidelines for the University of North Carolina at Chapel Hill ("University") School of Medicine's (SOM) dissemination of competencies and enabling competencies in accordance with the phases of the curriculum. By implementing specific dissemination paths during each phase, the SOM can ensure that all students, faculty, preceptors, residents and fellows receive and are informed about the school competencies, enabling competencies and learning objective

This Procedure provides the schedules, timelines, and requirements for the review of the University of North Carolina at Chapel Hill ("UNC-Chapel Hill") School of Medicine’s (SOM) student competencies and enabling competencies for each education phase and for the overall education program.