Information Security Program (DRAFT)

The purpose of the Goucher College Information Security Program is to:

1. Define the college’s Information Security Program to protect and safeguard college information and data
2. Outline a process to conduct regular information security and privacy risk assessments
3. Outline a process for evaluating and implementing information security safeguards
4. Develop and refine an employee security training program
5. Outline a process to assure ongoing compliance with federal regulations

• Financial Services Modernization Act of 1999 (also known as Gramm Leach Bliley (GLB): 15 U.S.C. § 6801
• Family Educational Rights and Privacy Act (FERPA) of 1974: 20 U.S.C. § 1232g

6. Prepare the college for any future privacy and security regulations