Issuance of revisions to University Policy 5.10, Information Security

On behalf of the Vice President for Information Technology and Chief Information Officer, the University Policy Office announces the issuance of revisions to University Policy 5.10, Information Security.

Summary of key policy updates:

• Substantial revisions to align with current technology and security environment.
• Data classifications changed from Confidential (Level 1) to High Risk; Restricted (Level 2) to Moderate Risk; and Public (Level 3) to Low Risk.
• Removed Procedures section for Weill Cornell Medicine.

Please familiarize yourself with the updated policy and contact the IT Security Office if you have any questions.