It is the policy of Canisius College to maintain a comprehensive
Information Security Program in compliance with Gramm Leach Bliley Act (GLBA). The
objective of the Program is to: ensure
the security and confidentiality of Covered Data and Information in compliance
with applicable GLBA rules as published by the Federal Trade Commission;
safeguard against anticipated threats to the security or integrity of Covered
Data and Information, including electronic data; and guard against unauthorized
access to or use of Covered Data and Information that could result in harm or
inconvenience to college students, employees, and customers.
The college's Information Security
Program incorporates, by reference, college-wide and departmental policies and
procedures that address the security and confidentiality of data encompassed by
the definition of "Covered Data and Information," below. These include, but are not limited to, the college's
Student Records (FERPA), Identity Theft
Prevention, Mobile Device Use and Support, Acceptable
Use of College Computer and Network Systems Policy, Confidential
Information, and HIPAA policies.