Rosedale Technical College Information Security Program
This Information Security Program (ISP) for Rosedale Technical College defines, documents, and supports the implementation and maintenance of comprehensive administrative, technical, and physical safeguards. Its core purpose is to protect personal information collected, received, used, and maintained, ensuring security, confidentiality, integrity, and availability. The ISP integrates a cycle of risk assessments, specifies detailed security policies and procedures (including adherence to CIS Controls framework), outlines service provider oversight, IT change management protocols, and a data retention plan. A critical component is the Incident Response Plan, designed to effectively address security incidents, protect against threats and unauthorized access, and ensure compliance with applicable state and federal regulations.