SC-001.02 – Network Security Infrastructure

Responsible Office: Office of Cybersecurity

Last Review: 08/17/2022

Next Review: 08/17/2024

Contact: Chris Madeksho

Phone: 901.448.1579

Email: mmadeksh@uthsc.edu

Purpose

To specify the authority for UTHSC network infrastructure access, implementation, maintenance, operations, and change. This standard is also designed to meet compliance requirements for data regulated by federal or state law. This includes, but is not limited to, security requirements and safeguards for the Family Educational Rights and Privacy Act (FERPA), Health Insurance Portability and Accountability Act (HIPAA), or Gramm-Leach-Bliley Act (GLBA).

Scope

This Practice applies to all entities providing or managing network services to the UTHSC at its various locations.

Responsibilities

The responsibilities of the UTHSC Network Services department is described in the Practice section.

Practice

  1. Authorized Network Service Providers at UTHSC are:
    1. Network Infrastructure as a division in the Office of the Vice Chancellor for Information Technology/CIO (UTHSC Network Services)
    2. Authorized personnel at other locations (Knoxville, Chattanooga, Nashville, and Martin)
  2. UTHSC Network Services coordinates and documents all network implementations, changes, moves, deletions, for the UTHSC Main Campus in Memphis and all UTHSC locations.
  3. UTHSC Network Services maintains documented minimal standards for:
    1. Communication closets
    2. Communication equipment
    3. Cabling infrastructure
    4. Router and Switch infrastructure
    5. Network Protocols
  4. UTHSC Network Services is the authoritative source for:
    1. IP address space registration, allocation, and individual IP address assignment
    2. Network zones implemented in the UTHSC
    3. Wireless Network SSIDs
  5. UTHSC Network Services develops and maintains documented procedures for:
    1. DHCP options
    2. IP address requests
    3. Device to VLAN mapping
    4. Network configuration and change management

References

  1. SC-001-Network Security
  2. IT0120 – Secure Network Infrastructure

SC-001.02 – Network Security Infrastructure
Version: 4 // Effective: 03/20/2016
PDF icon Downloadable PDF

Related Procedures: