Our information security campaign is based on the key principle that information security is not just about technology, it’s about people. Nearly all of our employees handle some form of information that is sensitive and must be protected.

To ensure we are taking the right measures to protect information, five new administrative policies went into effect this year. The policies establish the responsibilities of all employees to protect the information they handle. Internal audit will gauge employees’ awareness of the policies as part of an ongoing compliance audit. You can find the policies at www.cu.edu/itsecurity.

Securing our information is a priority. We must be aggressive in the steps we take to ensure information is appropriately protected. It is not only about having the right technology to protect data, but also about every employee understanding his and her responsibilities.

As you’re aware this will be a challenging endeavor. All of us have a critical role in ensuring our data is protected. Your support of the training and compliance is essential for our success.

 Excerpted from memo from CU President Hank Brown, dated August 29, 2007