Internal governance documents, compliance frameworks, and risk management resources for USU leadership, data stewards, and security staff. Access is role-based and requires authentication.
The resources below contain sensitive institutional information governed by USU Policy 5200 and USHE R345. They are available to USU personnel with governance, compliance, or data stewardship responsibilities. Access requires USU single sign-on and is subject to conditional access policies. If you believe you should have access, contact the InfoSec Team.
Governance Documents & Tools
Information Security Plan
USU’s comprehensive information security program document, satisfying USHE R345 requirements and crosswalked to NIST CSF 2.0 and CIS Controls v8.1. Covers roles, responsibilities, controls, compliance monitoring, and incident response.
Campus-Wide Compliance Partner Directory
Named compliance contacts and security roles supporting the USU Information Security Plan. Covers campus partners across legal, privacy, research, financial, records, risk, and more. Includes an interactive relationship map and policy cross-references.
Cybersecurity Framework Portal
USU’s internal NIST CSF 2.0 implementation tracker. Maps institutional controls to the Govern, Identify, Protect, Detect, Respond, and Recover functions. Tracks maturity, gaps, and remediation progress across the security program.