Re: IT Policies based on NIST Framework

[Brad Judy <brad.judy () CU EDU>]

The University of Colorado baseline security standards are an adapted version of NIST 800-53 v4.  Our infosec policies 
aren’t based upon NIST, but our standards are referenced by the policies.

https://www.cu.edu/sites/default/files/Baseline-Security-Standard.doc


Brad Judy

Director of Information Security
University Information Systems
University of Colorado
1800 Grant Street, Suite 300
Denver, CO  80203
Office: (303) 860-4293
Fax: (303) 860-4302
www.cu.edu

[cu-logo_fl]



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Carlos 
Lobato
Sent: Tuesday, April 28, 2015 8:29 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] IT Policies based on NIST Framework


Good Morning Colleagues,



If your University has developed IT policies based on the NIST Framework (SP 800-53v4) please let me know and if 
possible send me a link to your policy page.



Thanks in advance,



Carlos​



Carlos S. Lobato, CISA, CISSP, CPA

IT Compliance Officer



New Mexico State University

Information and Communication Technologies

MSC 3AT PO Box 30001

Las Cruces, NM  88003



Phone (575) 646-5902

Fax (575) 646-5278