Terminology Definitions

Elevated Access: A level of access that is authorized to perform functions that ordinary users are not authorized to perform.

Information Guardians: The individual(s) or Unit with operational authority for specified College Information and responsibility for establishing the controls for its generation, collection, processing, dissemination, and disposal. This individual or Unit is responsible for making risk tolerance decisions related to such Information on behalf of the College and is organizationally responsible for any loss associated with a realized information security risk scenario.

Information Resources: College Information and related resources, such as equipment, devices, software, and other information technology.

Information System: A major application or general support system for storing, processing, or transmitting College Information. An Information System may contain multiple subsystems. Subsystems typically fall under the same management authority as the parent Information System. Additionally, an Information System and its constituent subsystems generally have the same function or mission objective, essentially the same operating characteristics, the same security needs, and reside in the same general operating environment.

Information System Owner: The individual(s) or Unit responsible for the overall procurement, development, integration, modification, and operation and maintenance of an Information System. This individual or Unit is responsible for making risk tolerance decisions related to such Information Systems on behalf of the College and is organizationally responsible for the loss, limited by the bounds of the Information System, associated with a realized information security risk scenario.

Unit: A college, department, school, program, research center, business service center, or other operating Unit of the Institution.

College Information: Any communication or representation of knowledge, such as facts, data, or opinions, recorded in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual, owned or controlled by or on behalf of the College.

College-Related Persons: College students and applicants for admission, College employees and applicants for employment, Designated Campus Colleagues (DCCs), alumni, retirees, temporary employees of agencies who are assigned to work for the College, and third-party contractors engaged by the University and their agents and employees.

User: Individual or group that interacts with a system or benefits from a system during its utilization.