�鶹Ӱ��

The purpose of this policy is to provide an environment conducive to and supportive of health and well being for all �鶹Ӱ�� Faculty, Staff, Students, and guests. The strong relationship between diet and health and the increasing rates of weight problems make supporting healthy food choices at Pacific part of our commitment to health. �鶹Ӱ�� is committed to providing an environment that encourages healthy lifestyles among its employees, students, and partners. As meetings...

This document informs students that the illegal distribution of copyrighted materials may subject them to criminal and civil penalties and describes the steps that Pacific will take to detect and punish illegal distribution of copyrighted materials. Distribution of this information to students is required by the Higher Education Opportunity Act (HEOA). �鶹Ӱ�� Compliance with the Higher Education Opportunity Act Peer-to-Peer File Sharing Requirements

The purpose of this policy is to set forth �鶹Ӱ��’s process for addressing potential breaches of unsecured protected health information from incident discovery to investigation / risk assessment and potential notification. �鶹Ӱ�� has established a comprehensive HIPAA privacy and security program to prevent unauthorized access to protected health information (PHI). This policy sets forth Pacific's approach to investigating and responding to incidents that may involve...

The purpose of this Policy is to set forth �鶹Ӱ��’s process for applying sanctions for violations of Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security policies. �鶹Ӱ�� has established a comprehensive HIPAA privacy and security program to prevent unauthorized access to protected health information (PHI). This policy sets forth Pacific's approach to applying consistent sanctions upon completion of investigations. This policy applies to the...

Identification (ID) cards (Boxer Cards) are issued to �鶹Ӱ�� employees. An ID card may be required for admission to or participation in University programs. The University ID card also serves as a library card. ID cards are issued by Campus Public Safety.

�鶹Ӱ�� developed this Identity Theft Prevention Policy pursuant to the Federal Trade Commission’s Red Flags Rule, which implements Section 114 of the Fair and Accurate Credit Transaction (FACT) Act of 2003. The purpose is to establish an Identity Theft Prevention Policy designed to detect, prevent and mitigate identity theft in connection with the opening of a covered account or an existing covered account and to provide for continued administration of the policy. This protection...

All employees hired by the University must present documentation establishing their identity and employment authorization in accordance with the immigration laws of the United States prior to hire and upon request of the University at any time after hire.

The �鶹Ӱ�� Libraries seek to advance critical inquiry, collaborative learning, and knowledge creation through dynamic services, spaces, and collections. The Libraries’ enactment of this mission is guided by our core values, which prioritize providing opportunities to engage with diverse ideas, providing services that contribute to equitable access to information, and the use of inclusive approaches to delivering services. Aligned with this mission and these values, the Libraries...

The Inactivation of Courses Policy allows for the inactivation of courses that have not been offered in four years. Each year in early spring as part of the catalog update process, the Registrar’s Office will forward to each academic unit courses from that unit that have not been offered in 4 years, for review for inactivation. Certain courses that may be offered infrequently, such as New/Special Topics courses, Internships and Independent Studies, will be excluded from the list. If the program...

Grounded in the core theme of educating for student success, Individual Development Plans intend to guide �鶹Ӱ�� and postdoctoral students in their professional development and career planning. Graduate students and post-doctoral researchers supported by funding from the National Institutes of Health (NIH) are required to develop Individual Development Plans (IDP). Required progress reports submitted to the NIH must include a copy of the University’s IDP policy, a description of whether the...

Information security related incidents impact �鶹Ӱ��'s (Pacific) security goals and may also harm its ability to conduct business. These incidents may be malicious in nature or accidental. Pacific has selected and implemented a set of safeguards, which are based on the result of risk assessments and information security standards. In the event of a security related incident, this policy addresses the methods for identifying, responding to and, when possible, preventing security...

This policy sets forth Pacific's approach to applying sanctions upon completion of investigations regarding misuse of Protected Data. Attempting to obtain or use, actually obtaining or using, or assisting others to obtain or use Protected Data, when unauthorized or improper, will result in counseling and/or disciplinary action up to and including termination. �鶹Ӱ�� has adopted this Information Security Sanctions Policy to ensure the confidentiality, integrity, and availability of...

Appropriate management of access to protected health information is an important aspect of �鶹Ӱ��'s information security strategy. �鶹Ӱ�� has adopted this Access Control Policy in order to recognize the requirement to comply with the Health Insurance Portability and Accountability Act (“HIPAA”). The purpose of this policy is to establish a standard for HIPAA access control activities related to the �鶹Ӱ�� HIPAA Program. Pacific is committed to take reasonable...

Appropriate management of access to Protected Data is an important aspect of �鶹Ӱ��'s information security strategy. The policy outlines requirements and process for granting members of the workforce appropriate levels of access to electronic Protected Date based on study or work-related duties and responsibilities. Policy also outlines the documented process for granting authorization and access to Protected Data. PUNID required to review policy.

Most information systems, including electronic health records that contain ePHI have the ability to create log files, which describe the activity occurring to, or within the system. A timely review of system activity can give insight into potential issues that may negatively impact the security of protected health information. The purpose of this policy is to establish �鶹Ӱ��'s compliance with federal HIPAA regulations including standard practices for reviewing system activity within...

The goal of Information Systems Activity Review is to prevent, detect, contain, and correct security violations and threats to Protected Data such as unauthorized access to the information systems, suspicious data use, or tampering. Designated workforce members in each college, school or department will review any unauthorized access to the information systems, suspicious data use or tampering. They will take appropriate action regarding potential system vulnerabilities, improve safeguards as...

The purpose of this standard is to define approved methods for using encryption technology to ensure the integrity and confidentiality of electronic protected health information (ePHI) and other �鶹Ӱ�� confidential information while at rest and during transmission. This standard applies to all data that is considered �鶹Ӱ�� confidential information, including ePHI when it is at rest, being processed, or transmitted between information technology resources. Data encryption...

The purpose of this standard is to define approved methods for using box.com to ensure the integrity and confidentiality of protected health information (PHI) and other �鶹Ӱ�� confidential information while at rest and during transmission. This standard applies to all data that is considered �鶹Ӱ�� confidential information, including PHI, and is being stored in Box, regardless of its storage duration. Business and instructional needs may require the storage of PHI in the...

This standard establishes a consistent set of minimum security measures required for computer workstations used within �鶹Ӱ��. This standard also addresses standards for vendor and personally owned workstations when they are connected to �鶹Ӱ��’s systems and networks.The elements of this standard include requirements for installation and configuration, access control, physical security, document storage, logging and monitoring, and change management. �鶹Ӱ��...

The creation, and use, of intellectual property is at the core of the academic enterprise at �鶹Ӱ��. The intellectual contributions of faculty, staff and students to the University community enrich our common knowledge, and they foster our shared spirit of innovation. More information on copyright law and guidelines can be found through the United States Copyright Office.