5250 Information and Data Security

Original Date: 6/10/2003 * Last Revision Effective: 12/10/2025
Policy Contact: Vice President Information Technology Services

Policy

Bellevue College is committed to providing adequate security and protection of all electronic data and information within its domain of ownership and control. The college will establish procedures and standards which will guide and assist technology users in:

  •  Protecting the integrity, availability and confidentiality of information assets managed by college employees.
  •  Protecting information assets from unauthorized release or modification, and from either accidental or intentional damage or destruction.
  •  Protecting technology assets such as hardware, software, telecommunications and network infrastructure from unauthorized use or misuse.

These procedures and standards will comply with the WaTech policies to establish a shared, trusted environment for the protection of sensitive data and accomplishment of business transactions.

Applicability

This policy applies to all members of the college community, with specific duties and responsibilities placed upon departments within Information Technology Services (ITS). This policy applies to all campus facilities, equipment and services that are managed by ITS, including off-site data storage, computing and telecommunications equipment, and internet-related applications and connectivity. This policy also applies to technology services purchased from other state agencies or commercial concerns.

It is not the intent of this policy to restrict academic freedom in any way, nor to impinge on the intellectual property rights of authorized technology users. It is the intent of the college to take precautions to prevent revealing specific security policies, procedures, standards and practices containing information that may be confidential or private as it applies to college business, communications, and computing operations or employees. Therefore, this policy exercises appropriate exemptions from public disclosure granted in WaTech policies and RCW 42.56.

Persons responsible for distribution of any of related information security documents should consider the sensitive nature of the information, as well as related statutory exemptions from public disclosure before disclosing this information.

Responsibilities

Information Technology Services (ITS) Vice President

  • It is the responsibility of the ITS vice president to provide oversight and management of all tasks and processes which directly pertain to maintaining information security on campus.

Campus Technology Users

  • It is the responsibility of all members of the college community to comply with all college policies, procedures and standards, including those pertaining to information security and campus technology use.

Definitions

All definitions pertaining to information security policies, procedures and standards are centralized in the 220 Information Security Definitions standards document.

Relevant Laws and Other Resources

Revision History

Original 6/10/2003
Revision 5/21/2009; 7/28/2012; 9/13/2012; 11/19/2014; 6/20/2023; 12/10/2025

Approved By

Board of Trustees

Last Updated December 15, 2025