RIT - Information Security: Policy and Standards:
"What are Policy and Standards?
Policy defines the strategy and direction of RIT’s approach to a particular issue; in this instance information security. All policies are grouped together in the Institute Policies and Procedures Manual.
Standards are created by the Information Security Office to help the RIT community implement the Information Security Policy.
The Information Security Policy (and standards) apply to the entire RIT community, including students, faculty, staff, external business associates, and volunteers."