Policy Name: Information Security Awareness, Training and Education

1. Policy Statement This policy establishes the requirement for information technology (IT) security awareness, training and education for members of the Rutgers, The State University of New Jersey, community who have access to the University’s information systems and information assets in accordance with Family Educational Rights and Privacy Act (FERPA) and Health Insurance Portability and Accountability Act of 1996, Public Law 104-191 (HIPAA) laws. 2. Reason for Policy To set a requirement for the education and training of University personnel related to Information Security. 3. Who Should Read This Policy This policy applies to any individual responsible for the management, operation, and/or maintenance of the legacy UMDNJ information technology services and/or environment. If you are uncertain whether this policy applies to you, please contact your direct supervisor