IT Policy and Standard Lifecycle

Purpose

To define the approach to the development, approval and maintenance of IT policies and standards.

Scope

This applies to all policies and standards recommended by governance for UFIT and issued by the Vice President and Chief Information Officer.

Standard

  1. Policy and standard development and approval
    1. Any faculty, staff member or student may propose a topic or content for a policy or standard. Such proposals should be directed to the relevant topical committee or to the Office of the VP and Chief Information Officer
    2. The chair of each topical committee decides which proposals are appropriate for consideration
    3. Drafts of proposals to be considered are typically prepared by staff and submitted to the topical committee. The topical committee reviews and modifies the draft as needed, and makes a recommendation to the IT Policy Council. The topical committee may seek input from constituent groups
    4. The IT Policy Council will review the draft. The draft can be returned to the originating committee with comments for modification or forwarded to other committees or constituents for comment
    5. Comments are returned to the originating committee, which addresses the comments and makes a recommendation to the IT Policy Council
    6. When the IT Policy Council deems the draft complete, it forwards the draft to the Vice President and Chief Information Officer
    7. The Vice President and Chief Information Officer seeks input from University administration and others as appropriate
    8. The Vice President and Chief Information Officer seeks input from the Office of General Counsel
    9. The Vice President and Chief Information Officer approves the policy or standard
  2. Policy and standard implementation
    1. The Vice President and Chief Information Officer notifies the University by issuing a DDD about the new policy or standard and its effective date
    2. Policies and standards are posted on the UFIT website
    3. Information about policies and standards may also be communicated via announcements, memoranda and training
  3. Policy and standard maintenance
    1. Revisions to policies and standards follow the same process for approval as new policies or standards
    2. Policies and standards should be reviewed as appropriate or as required by law