Research Security Information Technology Resources

Information Security Incident Response Standard & Procedure
The Information Security Incident Response Standard & Procedure provides Morgan State University with a structured framework for identifying, managing, and responding to information security incidents. Its primary goal is to minimize the potential impact on the university’s information assets while ensuring the confidentiality, integrity, and availability of critical systems and data.

Information Security Risk Management Standard & Procedure
The Information Security Risk Management Standard & Procedure establishes a formal process for identifying, assessing, and managing risks to Morgan State University’s information systems. It defines the methodologies necessary to evaluate risks, implement mitigation strategies, and ensure the ongoing protection of information assets. This procedure aligns with national and international frameworks, including NIST SP 800-37, NIST SP 800-53, ISO 27005, and ISO 31000, to support a consistent, standards-based approach to information security risk management.

Data Encryption Procedure
The Data Encryption Procedure ensures that Morgan State University’s sensitive and confidential information is protected through the implementation of strong encryption practices. As a critical security measure, encryption safeguards data from unauthorized access by rendering it unreadable without the appropriate decryption credentials.

Data Classification Procedure
The Data Classification Procedure establishes a structured framework for categorizing, managing, and protecting Morgan State University data based on its sensitivity and the risks associated with unauthorized access or disclosure. Proper classification enables the implementation of appropriate security controls and safeguards, helping to prevent data breaches, loss, or misuse, and ensuring compliance with legal, regulatory, and institutional requirements.