Security and Privacy Controls for Information Systems and Organizations

This document is intended solely as guidance and does not contain any mandatory requirements except where requirements found in statute or administrative rule are referenced. This guidance does not establish or affect legal rights or obligations and is not finally determinative of any of the issues addressed. This guidance does not create any rights enforceable by any party in litigation with the State of Wisconsin or the Board of Regents. Any decisions made by the Board of Regents in any matter addressed by this guidance will be made by applying the governing statutes and administrative rules to the relevant facts