Policies

Advanced Research Computing Policies

Access to Federation Resources and Services Policy

Consent to Access User Data

Cybersecurity Policies and Standards 

The following are approved Cybersecurity Policies, Standards and related documents that apply to the Alliance Federation. Change logs record major changes to each document over time (minor changes that do not alter the intent are not recorded). Feedback related to these documents should be addressed to security@tech.alliancecan.ca

SEC-00 Information Security Glossary

Related Documents: SEC-00 Change Log

SEC-01 Cybersecurity Policy

Related Documents: SEC-01 Change Log

SEC-02 Data Classification Policy

Related Documents: SEC-02 Change Log

SEC-03 Data Handling Standard

Related Documents: SEC-03 Change Log

SEC-04 Vulnerability Management Standard Note: Standard is approved in-force but with a transition period until the end of 2023. 

Related Documents: SEC-04 Change Log

SEC-05 Cybersecurity Risk Management Policy Note: Policy is approved in-force with an implementation project underway 

Related Documents: Risk Assessment ProcedureSEC-05 Change Log (policy) SEC-05b Change Log (Risk Assessment Procedure)

SEC-06 System Logging and Security Monitoring Standard

Related Documents: SEC-06 Change Log

SEC-07 Network Security Standard

Related Documents: SEC-07 Change Log

SEC-08 Physical Security of Data Centres Standard

Related Documents: SEC-08 Change Log

SEC-12 Backup Standard

Related Documents: SEC-12 Change Log

TOU-01 Terms of Service

Related Documents: TOS-01 Change Log