Office of Information Security Logo
Policies and Practices Logo

Policy and Standards

The Board of Trustees of the University of Maine System established this information security policy in support of the mission and goals of the University of Maine System (“UMS”) and all component entities thereof.  The objective of this information security policy is to convey the Board’s direction for the appropriate use and protection of UMS information assets and to specify the requirements for protecting those information assets. This document applies to all UMS faculty, staff, employees, contractors, consultants, business partners and anyone who accesses or possesses UMS information assets.

For guidance and documentation on Policy Adherence please follow the link below. 



Acceptable Use of Information


The University of Maine System (all of its Campuses and subordinate components) endeavors to develop and provide access to collections, services, facilities, equipment, and programs which meet the information and educational needs of the University community, and to advance the research, instruction, and service missions of UMS.

State & Federal Regulations

The Maine Data Act which outlines what constitutes a security breach and what obligations are required to notify specific individuals in specific situations. 

The HIPAA Act of 1996 is a federal law which calls for the establishment of standards and requirements for the electronic transmission of certain health information.

The University of Maine System has designated certain information contained in the education records of its students as directory information for purposes of FERPA.  Such directory information may be publicly shared by the University unless the student has taken formal action to restrict its release. 

Administrative Practice Letters

The Office of Information Security currently owns and presides over theInformation Security Incident Response APL.   The primary purpose of this APL is to provide guidance to all UMS staff regarding the overall UMS approach to responding to incidents, outlines procedures to be followed when an incident is discovered, and provides a foundataion for campuses to build local plans


16 Central Street Bangor, Maine 04401
Telephone: (207) 973-3201 | Fax: (207) 973-3296
Express Message: (207) 973-3399 | TTY Phone (24 Hours)(207) 973-3262