Pasar al contenido principal
Hillsborough Community College Logo
  • Language

    • English
    • Español
  • MYHCC
  • Buscar
    What are you looking for?
    Filter by type
  • Aplicar
  • Registro
  • CONTÁCTANOS
  • Menú
MYHCC
  • Inicio
  • Aplicar
  • Sobre Nosotros
    • Misión, Visión y Valores
    • Contactános
      • Contactos por campus
        • Directorio de HCC
    • Liderazgo
      • Junta Directiva
        • Aviso de Reuniones
      • Liderazgo Universitario
      • Asesor General
      • Presidente
        • Autoridad Legal
    • Normas y Procedimientos Administrativos
    • Información al consumidor
      • Economic Security Report Resources
      • Solicitud de registros públicos
      • Colección de números de seguro social
      • Resultados de los estudiantes atletas
    • Título IX y Cumplimiento de los Derechos Civiles
      • Título IX
      • La Cumbre Nacional de la BBCB
        • Historia de la Cumbre Black, Brown and College Bound
    • Hechos e información
      • Artificial Intelligence Statement of Principle
      • Plan estratégico
    • Fundación HCC
    • Recursos humanos
      • Trabajar en HCC
        • Solicitantes externos
        • Solicitantes internos
    • Ubicaciones y direcciones
      • Campus de Brandon
        • Brandon Campus Factsheet
        • Brandon Clubs
      • Campus de Dale Mabry
        • Dale Mabry Campus Factsheet
        • Dale Mabry Clubs
          • Model United Nations
            • Model United Nations Conferences
      • MacDill Center Directions
      • Plant City Campus
        • Plant City Clubs
        • John R. Trinkle Center
        • Plant City Campus Factsheet
      • Campus de SouthShore
        • Southshore Campus Factsheet
        • SouthShore Clubs
      • Ybor City Campus
        • Ybor City Campus Factsheet
        • Ybor City Clubs
      • Ybor City Campus Training Center
      • HCC at The Regent
      • Dr. Gwendolyn W. Stephenson District Administration Center
      • Parking
    • Sala de redacción
    • Departamento de compras
  • Junta Directiva
  • Programas Académicos
    • Regístrate ahora
    • Tipos de titulaciones en HCC
    • Asociado en artes
    • Asociado en ciencia
      • Aprendizajes
        • Carpentry Apprenticeship
        • Commercial Electrician Apprenticeship
        • Fire Sprinkler Fitter Apprenticeship
        • HVAC Technician Apprenticeship
        • Pipefitter Apprenticeship
        • Plumber Apprenticeship
        • Roofer Apprenticeship
        • Sheet Metal Fabricator Apprenticeship
    • Recursos académicos de la A a la Z
    • Calendarios académicos
    • Iniciativas académicas
      • Asequibilidad de los libros de texto
    • Explorar todos los títulos y certificados
    • Catálogos
    • DInsignias digitales
      • Fundamentos de la comunicación escrita
    • HCC en línea
      • Divulgaciones de licencias profesionales
    • Directorio de profesores
    • Divulgaciones de empleo remunerado
    • Biblioteca
    • Fuerza laboral y aprendizaje permanente
    • Tipos de clases
    • Caminos matemáticos
    • Undergraduate Research
  • Admisiones
    • Aplica ya
    • Pasos para inscribirse
      • Primera vez en la universidad
        • Opciones para estudiantes de secundaria
      • Inscripción doble
      • Ex alumnos que regresan
      • Admisiones en Ciencias de la Salud
      • Estudiantes internacionales
        • Requisitos de admisión a la escuela secundaria internacional
      • Estudiantes transferidos
      • Estudiantes visitantes (transitorios)
      • Pasos para unirse a HCC
    • Preguntas frecuentes
    • Tarjeta Hawk de HCC
    • Inicio de sesión en HCC
    • La oficina del Registrador
      • Consecuencias de la baja/retiro
      • Ley FERPA
      • Solicitar transcripciones de HCC
      • Exención para personas mayores
      • Transcripciones
    • Regístrate ahora
      • Clases de inicio flexible
      • Vídeos instructivos para estudiantes
    • Residencia
      • Reclasificación de residencia
    • Orientación
  • Pagar la universidad
    • Ayuda financiera y becas
      • Ayuda financiera para TV
      • Pago de prestamo
      • Becas, subvenciones y programas de estudio y trabajo
        • La Ley CARES
        • Becas
        • Subsidios
          • Fecha del censo Pell
          • Pell durante todo el año
      • Información sobre préstamos estudiantiles
        • Préstamos directos federales PLUS
        • Préstamos privados
      • Solicitud de ayuda financiera
        • Fechas importantes
        • Solicite ayuda financiera en línea
          • Lista de verificación de ayuda financiera
        • Derechos y responsabilidades
      • Elegibilidad para ayuda financiera
        • Política de verificación
        • Devolución de fondos no devengados
      • Educación financiera y gestión de impagos
      • Ayuda financiera para veteranos
      • Progreso académico satisfactorio
      • Formularios de ayuda financiera
    • Privacidad financiera
    • Financial Responsibility Statement
    • Información del pago
      • Desembolsos de BankMobile
      • Florida Prepaid
      • Pago de matrícula de guardería infantil de HCC
      • Pague en línea la solicitud de Ciencias de la Salud, los exámenes y otras tarifas
      • Pague en línea las tarifas de verificación de antecedentes de personal, fuerzas del orden, bomberos, servicios médicos de urgencia y paramédicos
      • Pagar por correo
      • Pagar en el campus
      • Información sobre los impuestos
      • Patrocinadores externos
      • Plan de pago de matrícula (TIPS)
      • Pago de matrícula en línea con Nelnet ePay
    • Reembolsos
      • Garantía de devolución del dinero
    • Matrícula y cuotas
    • Cost Of Attendance
  • Servicios estudiantiles
    • Asesoramiento académico
      • HawkGPS
    • Servicios para estudiantes de la A a la Z
    • Centros de éxito académico
    • Librería
      • Acceso Inclusivo
      • Hawk Book Bundle
      • Áreas Temáticas
    • Centros de recursos profesionales
      • Habilidades de búsqueda de empleo
      • Exploración
      • Evaluación de carrera
      • Empleo
      • Eventos del Centro de recursos profesionales
      • Programa federal de trabajo y estudio
      • Recursos profesionales para estudiantes de la fuerza laboral
        • Estudiantes en la fuerza laboral actual
        • Antiguos alumnos de la fuerza laboral
    • Cuidado de niños
    • Programa de extensión universitaria (CROP)
      • Aplicación CROP
      • Escuela intermedia y secundaria
      • Enlaces útiles de CROP
    • Quejas
      • Academic Appeal
      • Ombudsman
    • Laboratorios de computación
    • Asesoramiento
      • Programa de asistencia estudiantil
      • Reúnase con un consejero
        • Procedimiento de exención de matrícula para personas sin hogar
      • Prevención del abuso de drogas y alcohol
        • Drug and Alcohol Student Code of Conduct
        • Legal Sanctions
        • Health Risks
        • Where to get help
    • Vida en HCC
      • Talleres de desarrollo personal
      • Financiamiento de la universidad
      • Programas de éxito universitario
    • Bibliotecas
    • Seguridad Pública
      • Alerta de Hawk
      • Hablemos claro HCC
        • Administrative Withdrawal Procedure
        • Administrative Withdrawal
        • Report Concerning Behaviors
        • Speak Up HCC Policies
        • Submit a Care Report
      • Preparación para tiradores activos
      • Servicios de seguridad pública
      • Ley Jeanne Clery
      • Prevención del crimen
      • Estacionamiento
      • Delincuentes sexuales-depredadores
    • Services for Students with Disabilities
      • Ajustes académicos
      • Quejas de OSSD
      • Recursos para estudiantes
        • Responsabilidades de los Estudiantes
      • Solicitud de adaptaciones
      • Recursos de OSSD
    • Programa de asistencia estudiantil
    • Código de Conducta Estudiantil
    • Manual del estudiante
    • Pruebas
      • Pagar por las pruebas
      • Evaluación del aprendizaje previo
        • Opciones para el personal militar
      • Pruebas de nivel
        • Opciones por prueba
      • CLEP
    • Servicios de Apoyo Estudiantil TRIO
      • Becas TRIO
      • TRIO Social y Cultural
      • Actividades TRIO
      • TRIO - Preguntas frecuentes
      • Consejos y enlaces útiles
    • Asuntos Estudiantiles de Veteranos
      • Prevención de la deuda
      • Pautas generales para veteranos
      • Ayuda financiera para veteranos
      • Documentos y formularios requeridos por el VA
      • Pasos para inscribirse
        • Veteranos que ingresan por primera vez a la universidad
        • Estudiantes Veteranos Transferidos
        • Ex estudiantes veteranos regresan
      • Exención para veteranos
  • Recursos Adicionales
    • Alumnos
    • Graduación
      • Información sobre graduación
      • Cómo usar correctamente la toga y el birrete de graduación
      • Información sobre la graduación para PTK
    • Estudiantes Actuales
    • Empleadores
    • Alquiler de Instalaciones
    • Profesores y Personal
    • Alumnos de Secundaria
    • Padres y Familias
    • Vendedores
      • Avisos Públicos
      • Guía de Vendedores
      • Información de Compras
      • Registro de Proveedores
      • Solicitudes Competitivas
  • Vida en el campus
    • Ubicaciones
    • Deportes
    • Las Artes
      • Experimenta las Artes
      • Galerías de Arte
      • Instalaciones Artísticas
    • Clubes y Organizaciones
    • Opciones Para Comer
      • Servicios de Comedor
    • Centro de Tenis
    • Asociación de Gobierno Estudiantil
    • Vivienda Estudiantil
  • Fundación
    • Becas
    • Ex Alumnos y Amigos
    • Maneras de Donar
  • Preguntas frecuentes
  • Títulos y certificados
  • Calendario
  • Contactános
  • Office 365
  • Trabajos
  • Buscar clases
  • Directorio
  • Facebook
  • Instagram
  • Youtube
  • Linkedin
  • Sobre Nosotros
    • Misión, Visión y Valores
    • Contactános
      • Contactos por campus
        • Directorio de HCC
    • Liderazgo
      • Junta Directiva
        • Aviso de Reuniones
      • Liderazgo Universitario
      • Asesor General
      • Presidente
        • Autoridad Legal
    • Normas y Procedimientos Administrativos
    • Información al consumidor
      • Economic Security Report Resources
      • Solicitud de registros públicos
      • Colección de números de seguro social
      • Resultados de los estudiantes atletas
    • Título IX y Cumplimiento de los Derechos Civiles
      • Título IX
      • La Cumbre Nacional de la BBCB
        • Historia de la Cumbre Black, Brown and College Bound
    • Hechos e información
      • Artificial Intelligence Statement of Principle
      • Plan estratégico
    • Fundación HCC
    • Recursos humanos
      • Trabajar en HCC
        • Solicitantes externos
        • Solicitantes internos
    • Ubicaciones y direcciones
      • Campus de Brandon
        • Brandon Campus Factsheet
        • Brandon Clubs
      • Campus de Dale Mabry
        • Dale Mabry Campus Factsheet
        • Dale Mabry Clubs
          • Model United Nations
            • Model United Nations Conferences
      • MacDill Center Directions
      • Plant City Campus
        • Plant City Clubs
        • John R. Trinkle Center
        • Plant City Campus Factsheet
      • Campus de SouthShore
        • Southshore Campus Factsheet
        • SouthShore Clubs
      • Ybor City Campus
        • Ybor City Campus Factsheet
        • Ybor City Clubs
      • Ybor City Campus Training Center
      • HCC at The Regent
      • Dr. Gwendolyn W. Stephenson District Administration Center
      • Parking
    • Sala de redacción
    • Departamento de compras
  1. Sobre Nosotros
  2. Normas y Procedimientos Administrativos
  3. Administrative Procedures

Information Security Program: 9.12

ADMINISTRATIVE PROCEDURES

Title: INFORMATION SECURITY PROGRAM

 Identification: 9.12

Effective Date: July 11, 2023

Authority: FS 1001.64; 1001.65

Signature/Approval: Dr. Ken Atwater

PURPOSE

The purpose of this procedure is to provide details about standards for using, protecting, and accessing information and resources in accordance with applicable laws and institutional policies.

PROCEDURE

Hillsborough Community College (HCC) has established standards for protecting and securing information and using information and technology resources. Information is secure only when its integrity can be maintained, its availability ensured, its confidentiality preserved, and its access controlled. Security procedures protect information from unauthorized viewing, modification, dissemination, or destruction and provide recovery mechanisms from accidental loss. The security of information is the responsibility of all people who are authorized to access it.

The Office of Information Technology (OIT) establishes and maintains organizational Information Security policies, standards, guidelines, and procedures. The focus of these activities is on information, regardless of the form it takes, the technology used to manage it, where it resides, and which people possess it.

The procedure applies equally to any of HCC's information, including but not limited to electronic data, written or printed information, and any other intellectual property of the organization. The information resources include hardware, software, manuals, and office equipment. All individuals agree not to improperly disclose or unethically use the information for personal or professional gain.

OIT Responsibilities, Policies, and Procedures

OIT will establish and maintain sufficient preventive and detective security measures to ensure the college's information is free from significant risk of undetected alteration.

  • Information Security Policy Document

    • OIT is responsible for developing and maintaining this information security policy document.

    • OIT will conduct regular policies and procedure reviews and recommend updates and revisions as necessary.

    • The policies and procedures referenced in this document will be reviewed and evaluated bi-annually to ensure compliance.

    • Management fully supports the development and enforcement of these information security policies and procedures.

  • Information Security Organization

    • The Vice President of Information Technology, or their designee, will oversee and ensure compliance with Information Technology policies and procedures within the organization.

    • OIT will occasionally audit users to ensure that compliance exists across the organization as appropriate.

    • Third-Party connection access requirements to the computer network are documented in contracts and agreements.

    • Information security requirements are fully specified in outsourcing contracts.

    • The Office of Information Technology will designate a person to:

      • Coordinate the development and maintenance of information security policies and standards.

      • Investigate security incidents and coordinate their resolution as defined in the Incident Response Policy.

      • Oversee the institutional Information Security Awareness program.

      • Serve as liaison to the Local, State, and Federal Law Enforcement, Internal Audit, and College Legal Services.

    • Separation of Duties - Separate individuals must perform tasks involved in critical business processes. Responsibilities of developers, operations, and security administrators must not overlap unless authorized by the Information Owner.

 

Asset Classification

  • An IT Asset Information Management System (IMS) is in place that tracks the inventory and configuration of IT assets.

  • Data information assets are classified as Restricted or Sensitive according to the Data Classification Policy and the Data Classification Guidelines.

  • Classified information transmitted over insecure networks, such as the Internet, must be adequately encrypted.

  • Information Security Reviews must be performed in the following scenarios:

    • Implementation of new Information Systems and services or significant changes to existing college information services or systems that may store or transmit Restricted or Sensitive data.

    • Implementation of new critical infrastructure or significant changes to existing critical infrastructure.

    • Implementation of a new enterprise system or significant changes to existing enterprise systems.

    • Implement new systems or significant changes to existing systems, permitting third-party access to HCC systems or data.

    • Implementation of cloud services for the storing or processing of Restricted or Sensitive data

Personnel Security

  • Positions with specific information security job responsibilities have been documented in job descriptions.

  • Information security awareness is recognized as a significant risk management issue. New and existing employees receive information security policies as part of their orientation and annual training.

Physical Security

  • All Information Technology facilities must be physically protected in proportion to the importance of their function at Hillsborough Community College.

  • There are physical access controls on restricted areas that track access by authorized persons.

  • Computer rooms have installed fire suppression equipment. Maintenance is performed at least annually.

  • The Datacenter is equipped with an Uninterrupted Power Supply (UPS) system and a backup generator that is tested periodically.

     

Computer and Network Security

  • The college utilizes Endpoint Detection and Response (EDR) software to mitigate and remediate malware and threats to computers and servers. The college ensures that:

    • EDR software is installed on all file servers and institution-owned computers.

    • EDR software is routinely updated on managed computers.

    • A user is prohibited from disabling or removing EDR software from computers and servers.

  • There are preventative security controls to address threats to the security of computers and data.

  • Appropriate and regular backups of business systems are maintained. Routine testing verifies that the backups are restorable and that the process meets the retention requirements for each resource backed up. Retention periods for all essential business information have been determined, documented, and shared with relevant stakeholders.

System Access Control

  • A formal system access request procedure exists. Requests must be completed to create, modify, or delete any user account.

  • Unique user IDs and passwords are required to access information systems. Anonymous or shared accounts are prohibited unless authorization by OIT is provided.

  • All users are made aware of their responsibilities concerning creating and using strong passwords, and passwords must comply with the College’s password policy.

  • Only authorized users can gain access to networked systems from a remote location. Adequate controls exist governing the authentication of remote users.

  • Event logs are kept for most systems showing unauthorized access attempts, privileged operations, major system events, and system failures. Event Logs are reviewed regularly and in response to problems.

 

Compliance

 

  • There are management controls in place to monitor and ensure compliance with this Information Security Policy.
  • To comply with regulatory requirements, regular independent risk-based compliance reviews of controls, policies, and procedures exist. The results of these reviews will be provided to all applicable management and the Board of Trustees.

  • All managers and staff are educated about their responsibilities through orientation, policy, and Security Awareness training.

  • Information security audits are conducted regularly based on risk analysis results. Automated audit/security scanning and assessment utilities and tools are frequently used.

  • Audit, scan, or verification processes are documented; controls over access to audit materials have been established. Logging systems are in places that have been designed for most application systems. Access to system audit tools and system audit facilities is strictly controlled.

 

Reference

  • AP-9.08 Data Classification

  • AP-9.18 Vulnerability Assessment Policy

HISTORY

New

Make It Happen

  • Preguntas frecuentes
  • Títulos y certificados
Hillsborough Community College Logo
813.253.7000
Contactános
  • Facebook
  • Instagram
  • Youtube
  • Linkedin
© 2025
Hillsborough Community College
All Rights Reserved
  • Declaración de privacidad
  • Título IX y Cumplimiento de los Derechos Civiles
  • Feedback
  • Línea directa de fraude
  • Trabajos