Updated and Upcoming IT Policies and Standards

The ITS IT Policy team has been working on revisions and updates to a number of IT policies and standards in order to ensure they remain credible, implementable, and enforceable over time. Some recent highlights include:

  • Revising the university policy on Institutional Data Resource Management (SPG 601.12): the long-standing policy will reflect updates to technology and the U-M Data Governance Framework. An executive summary is available for review (U-M login required).
  • Streamlining the university policy on Domain Naming (SPG 601.15): merged the outdated policies on IT Addressing (SPG 601.15) and Domain Naming (SPG 601.15-1) into one. The policy is accompanied by guidance on requesting domain names (U-M login required).
  • Updating the IT Standard on Security Log Collection, Analysis, and Retention (DS-19): requirements for security log collection and retention are being revised and clarified. A summary of changes is available for review (U-M login required).

In addition, the group is collaborating with subject matter experts on updates to the IT Standard on Network Security (DS-14) and is in the process of drafting a new IT standard and guidance around endpoint protection.You can stay up-to-date on policies and standards under revision by visiting the Policies Under Review page on the website of the Office of the Vice President for IT & CIO.