Configuration and Maintenance addresses how IT devices and software are managed and maintained to ensure correct and secure operation. The cybersecurity-related policies in this portfolio are mapped to the NIST SP 800-53 control families.

Policies

• Accounting Services - Credit Card Merchant Services and PCI Compliance (device configuration and maintenance) _{(on bussvc.wisc.edu)}

• HIPAA _{(on compliance.wisc.edu)}

  • 8.11 HIPAA Security Data Management and Backup
  • 8.13 HIPAA Security System Configuration and Use

• IT Policy

  • Media and Device Disposal and Reuse Policy and Procedures
  • Endpoint Management and Security Policy
  • Email Servers Policy
  • Encryption Policy and Standard

Related Documents

• None