CT State committee reviews rewritten security policy and draft generative-AI guidance

Committee Chair Cherry Yang presided over the Connecticut State Colleges and Universities committee meeting on Feb. 26, 2025, where Interim Chief Information Officer Michael Mondrain presented updates on two systemwide policy efforts: a rewritten security policy and a draft generative-artificial-intelligence (AI) policy.

Mondrain told the Regents the security policy rewrite began from a determination that the prior text was largely “unimplementable” and “extremely difficult to understand.” He said the rewrite was intended to be written “in plain language” and to be actionable, explaining, “These are the things you can do. These are the things you can't do.” He said the new draft is less NIST-centric and less of an auditing document and that CIOs across the system have indicated the draft is “much more understandable.”

The interim CIO said the security policy is in the institutional review process and that he expects colleges’ academic…