Workstation Administrative Privileges Practice Directive

Authority:

UW System: UW System Administrative Policy 1039: Information Security Risk Management, UW System Administrative Policy 1032: Information Security Awareness, UW System Administrative Policy 1031: Data Classification and Protection

Regent: Regent Policy 25-5: Information Technology: Information Security

State: State Statute Subchapter 8: Information Technology

Federal: U.S. Department of Commerce: Security and Privacy Controls for Federal Information Systems and Organizations

Objective:

The University of Wisconsin-Whitewater is committed to providing a secure information technology (IT)

environment in support of the mission of the university. This Practice Directive is intended to ensure

compliance with UW System Policies, Regent Policies, State Statutes, and Federal Statutes regarding

information security risk management.

Statement:

This Practice Directive and its corresponding Procedure highlight the importance of proper risk management, specifically concerning elevated end user workstation privileges. These guidelines include risk mitigation controls where the likelihood of occurrence is almost certain / already occurring for the purpose of reducing risk and safeguarding access to information.

Procedures:

Information Security - Workstation Administrative Privileges Procedures

Searchable Words:

Information Security, Administrative Privileges