104D - Artificial Intelligence Security Standard
1.0 Purpose
The purpose of this standard is to communicate expectations and requirements related to use of Artificial Intelligence (AI) at Âé¶¹ÎÞÂë°æ (UAA), including what data is appropriate, the process for selecting and procuring Generative, Agentic, and other kinds of AI tools, as well as awareness of the risk associated with it.
2.0 Standard
2.1 Scope of Standard
This standard applies to the Âé¶¹ÎÞÂë°æ inclusive of all university campuses, IT systems, networks, and university administrative and operational data.
2.2 Standard
2.2.1 Compliance with UA System Standard
The UAA will comply with the University of Âé¶¹ÎÞÂë°æ System Generative AI Security Standard in its entirety. UAA may add additional standards to add to and extend the system standard. Additions are found below in this standard.
2.2.2 General Use and Selection of AI Tools
UAA constituents should follow the University of Âé¶¹ÎÞÂë°æ System Generative AI Guidance and use the GenAI Tool Risk Assessment guidance to determine what university data can be used with what AI Tools.
2.2.3 Prohibited AI Tools at UAA
UAA ITS will evaluate when specific AI tools are invasive or otherwise deemed to be high risk for the UAA community. ITS will maintain a list of Prohibited AI Tools on the ITS website that have been determined to be too invasive or high risk and may therefore not be used with UAA data, with UAA accounts, or used on UAA systems or network. This does not mean that the underlying LLM model is prohibited, only the specific AI tool or product.
2.2.4 Specific Use of AI Tools
2.2.4.1 Non-Repudiation and Human Responsibility
The actions of non-UA approved artificial intelligence tools either using a user's account as authorized by the user or otherwise authorized by the user in any way will constitute action by the user and for which the user is responsible.
3.0 Procedures
3.1 Maintaining the list of Prohibited AI Tools
Additions or subtractions to the list of Prohibited AI Tools must be proposed to ITS and approved by the Chief Information Officer.
4.0 Definitions
See IT Policies and Standards Definitions.
5.0 References
Generative AI Security Standard - UA System IT Standard
University GenAI Policies and Guidance
University of Âé¶¹ÎÞÂë°æ Board of Regents Policy & Regulations
6.0 Standard Information
Standard Effective Date: 11/15/2025
Standard Revision Date: 01/13/2026
Standard Owner: Ryan McDaniel - Associate Vice Chancellor and CIO
Standard Author: Ryan McDaniel - Associate Vice Chancellor and CIO
Revision History:
1.0: Initial version.
1.1: Update to add agentic AI terminology and section 2.2.4.1.






