The Oregon University System maintains their Information Security policy at http://www.ous.edu/departments/controllers-division/policies-procedures/ous-fiscal-policy-manual/information-security. It is each user's responsibility to read and understand this policy as it pertains to issues including, but not limited to, information identification and data classification; the handling of personal information; and incident response.