Auditing OIT Web Sites
OIT Procedure
Code: 2011-003
1. Scope
Last Reviewed: 07/01/2013
This document defines the procedures for periodically reviewing OIT Web sites to ensure their content is
up-to-date and the structure of the web site conforms to current University standards.
2. References
Rights and Responsibilities for the Use of UniversityAccessed Electronic Information Systems
70.2.23
3. Definitions and Acronyms
3.1. Definitions
Internet – A combination of international, national, state and local electronic networks employing a
common set of protocols that enables people around the world rapidly and easily to access and exchange
information, regardless of origin or location, and provide and receive services.
Official University Internet Websites and Web Pages – Provide information to the public about
established University-recognized entities, such as its schools, patient-care units, administrative offices,
research institutes, centers and programs, educational programs, clinical centers, institutes and programs.
Web Site Auditor – Anyone responsible for validating the contents of a web site conform to policies and
standards.
World Wide Web – A client/server environment on the Internet that provides multimedia information and
services with hypertext navigation.
3.2. Acronyms
Not applicable.
Auditing IT Web Sites
Adopted: 11/22/2011
Page 1 of 4
4. Applicability
This procedure applies to all members of the IT community.
5. Policy Requirements
The Dean, Vice President or Department Chair has ultimate responsibility for official Web pages. These
individuals or their designees must authorize the establishment of any official Web page under their
purview. Official Rutgers Web pages shall be reviewed by the responsible party every six to twelve months
and these reviews documented by changing the revision date at the bottom of the page to assure
compliance with University policy Rights and Responsibilities for the Use of University- Accessed Electronic
Information Systems.
Web site names should adhere to the following conventions:
Entity
Major units of the
University or
University-wide
functions
Convention
Example
Use a specific identifier
preceding the umdnj.edu
domain name. The
convention is
Robert Wood Johnson Medical School:
rwjms.rutgers.edu
{name of unit}.umdnj.edu
University Behavioral HealthCare:
ubhc.rutgersedu
New Jersey Dental School: sdm.rutgers.edu
Robert Wood Johnson University Medical Group:
umg.rwjms.rutgers.edu
Sub-unit within a
school or parent
unit such as a
department
Use the official Internet
address for its school or
parent unit, followed by the
official name of the sub-unit
as indicated on the school
organizational chart. The
convention is
Biochemistry at New Jersey Medical School:
njms.rutgers.edu/biochemistry
{school}.rutgers.edu/{name of
department}
The home page of all Official University Internet websites must bear the official logo of either the unit or
the University, as illustrated in the Rutgers Visual Identity Manual (copy located at
Auditing IT Web Sites
Adopted: 11/22/2011
Page 2 of 4
http://identity.rutgers.edu/guidelines-use/rutgers-visual-identity-manual). No other symbol, seal or logo
can be substituted.
6. Procedure
The web site auditor must:
•
Periodically, but on no less than on an annual basis, conduct an audit of OIT web sites to ensure
conformity to University web site standards. Exhibit A provides a Sample Annual IT Web Site
Audit Form.
•
Update the revision date at the bottom of the web page if the web page is found to conform to
University standards.
•
Contact the IT Web Management Group to resolve web site-related questions. The Content
Management System’s Web Site Audit Trail Report indicates when a web page was changed
and by whom and is available upon request.
If a web site is found to deviate from the standard, the web site owner should correct it.
7. Standard Ownership and Responsibilities
IT web sites are subject to audit by the University.
8. Exceptions
Any requests for exceptions to the provisions regarding IT web sites as defined herein must be approved
by the CIO.
By Direction of the CIO
___________________________________
Denise Romano
Auditing IT Web Sites
Adopted: 11/22/2011
Page 3 of 4
EXHIBIT A
SAMPLE ANNUAL IT WEB SITE AUDIT FORM
Web Site Name
Conforms?(Y/N)
Site URL
Site
Description
Date
Audited
Logo
Conforms?
(Y/N)
Copyright
Checked?
(Y/N)
Site Rev.
Date
Updated?
(Y/N)
Comments
http://rbhs.rutgers.edu/istweb/index.shtml
About IST
1/3/2011
Y
Y
Y
N
Date does not appear
on web page.
http://rbhs.rutgers.edu/ca/infosecurity/
Welcome to
the
Information
Security
Office (ISO)
1/3/2011
Y
Y
Y
N
Date does not appear
on web page.
___________________________________________
Web Site Auditor
Auditing IT Web Sites
Adopted: 11/22/2011
Page 4 of 4