Pacific University has adopted this Risk Analysis and Management Policy in order to recognize the requirement to comply with Information Security Requirements. Under the guidance of Senior Leadership, Pacific University will conduct periodic assessments of potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic Protected Data of which we have been entrusted.

Senior Leadership will be responsible for receiving, reviewing and acting upon the risk analysis, including assessing assignment of risk, prioritizing risk mitigation, and advocating for resources needed to implement a risk mitigation plan.

Updated 2/25/20
PUNID required to review policy.

The purpose of this policy and procedure is to confirm Pacific University’s compliance with federal HIPAA regulation 45 CFR §164.308(a)(8), which directs Pacific University to perform periodic evaluations of security safeguards, especially in response to environmental or operational changes, and are necessary to re-affirm that ePHI continues to be protected in accordance with the HIPAA Security Regulations. This policy reflects Pacific University’s commitment to comply with such regulations.

PUNID required to review this policy.

Security Evaluation Policy | POL-COM

Revised 11/8/2022

Pacific University has adopted this Workforce Security Policy to ensure the confidentiality, integrity, and availability of all Protected Data we create, receive, maintain, or transmit as required by federal or state regulatory requirements, including but not limited to FERPA, GLBA, HIPAA, PCI, and other regional or local applicable laws and regulations. During the course of normal operations, it will be necessary to provide Pacific University workforce members with access to electronic Protected Data. Access to sensitive materials such as this should be restricted to those individuals who have been vetted and authorized for such access and possess a need to know to perform the course of their duties. Workforce clearance procedures screen access to Protected Data and ensure that only those individuals who should possess access have access.

PUNID required to review policy.