PS-9 Position Descriptions

Description

Specification of security and privacy roles in individual university position descriptions facilitates clarity in understanding the security or privacy responsibilities associated with the roles and the role-based security and privacy training requirements for the roles.

Applicability

• This Control applies to all information resource owners and managers.

Implementation

• 1It is the responsibility of the information resource owner or manager, in conjunction with Human Resources, to:

  • 1.1Incorporate security and privacy roles and responsibilities into university position descriptions.