Information Technology Policies

The University of Chicago, through its IT Services department, maintains a broad range of policies and guidelines for the use of information technologies at the University. 

Please note that IT Services will never request your CNetID and/or password via email, external web form, or other unusual methods (e.g., a Google Sheets spreadsheet). If you receive such a request, it is a phishing attack and aimed at illegally obtaining your CNetID and password. Never reply to these messages or follow any instruction these messages contain.

Information Technology Policies

• Acceptable Use Policy

• Computer Account and Email Requirements for University Employees Policy

• Digital Accessibility Policy

• End-User Device Policy

• File Sharing Policy

• Information Security Policy

• Information Technology Resources and Account Privacy Policy

• New Information Technologies and Intellectual Properties Policy

• Research Data Protection Policy

• Social Security Number Digital Usage Policy

• Web Properties Management Policy

• Written Information Security Program

Information Technology Standards

• Asset Management Standard

• Commercial and Political Use of IT Resources Standard

• Data Classification Standard

• Incident Response Standard

• Information System Standards 2.0

• IT Services Authentication Services Standard

• Placement of Computing Devices in Network Security Zones Standard

• Port Monitoring Standard

• Redirection of University Domain Names to External Networks Standard

• Requirements for Managed (Hardware) Firewalls

• Research Data Center Standard

• Sanitization of Digital Storage Media Standard

• UChicago ID Usage Standard

• Use of External Service Providers

• Use of Non uchicago.edu Domain Names Standard

• Vulnerability Management Standard