Security, Policies & Guidelines

Web Application Development Policy – (Admin Council Approved)

Purpose of the Policy: This policy helps to insure the accessibility and privacy issues regarding personal information which apply to web sites developed on university resources. All developers must be familiar with ADA requirements and the privacy laws (FERPA, GLB and HIPAA).

Policy
Applications for general campus use should be developed with cross-platform compatibility for the most recent versions of the most popular browsers.

If a platform-specific feature is needed, it should be implemented on the server end and not the client end.

Web applications should be developed under ADA guidelines. Refer to http://www.nmsu.edu/~ssd/

Personal information cannot be sent using clear text, including email. A secure application or secure website must be used.

Servers used for storing personal or financial information within a department should be maintained with the latest security upgrades and patches and have an assigned system administrator.

NMSU Administrative Council must approve deviation from this policy.