The University of Strathclyde recognises that information, digital systems, and technology services are vital to supporting teaching, research, administration, and collaboration. Protecting these assets helps maintain trust, supports our strategic objectives, and ensures we meet our legal, regulatory, and contractual obligations.

Our Information Security Policy forms part of the University's Information Security Management System (ISMS) and sets out how we protect information that is created, stored, processed, transmitted, or accessed through University systems and services.

The Information Security Policy is supported by several related policies that provide more detailed guidance on specific areas of information security (e.g. Acceptable Use Policy, Mobile and Remote Working Policy, etc)

In summary, the Information Security Policy and supporting policies aim to:

• protect the confidentiality, integrity, and availability of University information
• support the University's strategic vision by reducing risks to our operations and reputation
• Is aligned with recognised cyber security good practice and national resilience frameworks
• defines the responsibilities of staff, students, contractors, visitors, and third parties
• promotes awareness, education, and training to help everyone protect University information

You can download the Information Security Policy and supporting policies below.

List of Policies

• ISP-01: Information Security Policy (Overarching)
• ISP-02: Acceptable Use Policy
• ISP-03: Mobile and Remote Working Policy