Description

Specification of security and privacy roles in individual university position descriptions facilitates clarity in understanding the security or privacy responsibilities associated with the roles and the role-based security and privacy training requirements for the roles.

Applicability

  • This Control applies to all information resource owners and managers.

Implementation

  • 1

    It is the responsibility of the information resource owner or manager, in conjunction with Human Resources, to:

    • 1.1

      Incorporate security and privacy roles and responsibilities into university position descriptions.