Program Overview

Cal Poly Information Security Awareness and Training

The Information Security Awareness Training Program is designed to help individuals protect and respond appropriately to threats and vulnerabilities to campus information assets. Consistent with CSU Information Security Policies, all employees with access to the Cal Poly network and information assets must participate in information security awareness training.

Program Requirements

• Everyone who has a portal account is required to take information security awareness training (ISAT) which is tied into the annual portal password change process.
• In addition to the portal training, anyone who has access to level 1 data is required to take detailed security awareness training, such as:
  • PCI training via SumTotal for those who conduct credit card transactions or have access to the PCI environment.
  • Annual HIPAA training for those who work in Health Care.
  • Security training customized for their environment, such as Cal Poly Learning Hub online security training presented by the Chancellor's Office, for those who work in Human Resources, Finance, or handle level 1 data as defined by the Cal Poly Classification and Handling Standard.

Additional Information

• Information Security Program
• Information Technology Resources Responsible Use Policy (RUP)
• Confidentiality-Security Agreements