This is the University of Wisconsin System Board of Regents policy establishing an information security program.
Please see UW System - Information Technology: Information Security