Policies and Standards

The SUNY information environment is governed systemwide by SUNY’s Information Security Policy 6900. The policy was revised and the revisions were approved by the SUNY Board of Trustees in September 2024. The updated policy will go into effect on September 1, 2025.

The Information Security Policy is supplemented by detailed standards covering specific technical subjects as well as guidance memorandums focused on discrete issues.

Systemwide Policies

• SUNY Information Security Policy 6900

Memorandums

• Memo - Application, Enrollment, Financial Aid, and Digital Resource Fraud
• Memo - Guidance on Emeritus and Alumni Accounts
• Memo - Direction on Prohibiting DeepSeek
• Board of Trustees 2024 Security Policy Approval Memo

Security Policy Attestation

• Information Security Policy Attestation - Campus Questionnaire Rev 1
• Chancellor Email to Presidents on Information Security Policy Attestation