Description
Applicability
-
The information resource owner, or designee, is responsible for ensuring that the measures described in this Control are implemented. The intended audience for this Control includes, but is not limited to, all information resources owners and custodians.
Implementation
-
1
The information resource owner, or designee, shall develop policies governing the use of external information systems and resources including the type and classification of data that can be stored outside of the university.
-
2
The information resource owner, or designee shall establish terms and conditions for contracting with external information resource providers.