AI Cyber Readiness

General Cybersecurity Principles

San Diego State University’s approach to Artificial Intelligence (AI) reflects its commitment to academic integrity, responsible innovation, privacy, and the protection of university data. AI should be used in ways that support teaching, research, and administrative work while safeguarding the SDSU community and its information assets.

Transparency and Accountability

Be transparent when using AI. Disclose when content is created or significantly supported by AI tools when appropriate (e.g., academic work, research, or official communications). Transparency may vary depending on context, but honesty about AI use is essential.

Users are responsible for:

• Verifying the accuracy of AI-generated content
• Reviewing outputs using trusted sources
• Ensuring appropriate use in their work
• All AI-assisted work remains the responsibility of the user.

Data Protection

Protecting SDSU data is a core responsibility.

• Treat information entered into public (non-enterprise) AI tools as if it were public.
• Do not enter sensitive, confidential, or protected data (e.g., FERPA, HIPAA, credentials, research data) into AI tools unless explicitly approved.
• Only use SDSU-approved or enterprise AI tools for university data.
• These expectations align with SDSU data protection responsibilities and CSU information security policy requirements.

Privacy Awareness

Be aware of how AI tools handle data. Many AI platforms may:

• Retain or reuse inputs
• Use data to train models
• Store prompts and uploaded files

Information entered into these systems may not be retrievable or fully deleted. Some tools may also interact with other applications or data on your device.

Procurement and Adoption

AI tools used for university business must follow SDSU and CSU processes.

• Acquisition of AI tools (including free tools used for work purposes) should follow campus procurement and risk review processes.
• Tools must meet security, privacy, and compliance requirements before use.

Use of AI Tools

Use only appropriate and approved tools.

• Use SDSU-supported or institutionally approved AI tools when working with university data
• Do not upload or process SDSU data in unapproved tools
• Follow campus IT and security guidance when selecting tools

Clarity Note: Approval requirements may vary based on data type, research obligations, or contractual restrictions. Consult the Information Security Office or your department IT if unsure.