This policy specifies the framework for implementing a university-wide, comprehensive, standards-based information security program to protect the information that is critical to teaching, research, and the university’s varied activities, its business operation, and the communities it supports, including students, employees, and the public. These protections may be governed by legal, contractual, or East Tennessee State University policy considerations.