take this "The document outlines Penn State University's comprehensive information security policy aimed at protecting the confidentiality, integrity, and availability of its information assets. The policy establishes a security program to safeguard against unauthorized access, loss, alteration, or damage while supporting the University's open academic culture. Key definitions include availability, confidentiality, data, information, and security incidents. The policy applies to all University members, excluding Penn State Health and The Pennsylvania College of Technology, and covers all institutional data and devices accessing it.

The policy's main objectives are to establish a unified information assurance program, maintain security policies and standards, protect data from unauthorized access, educate the University community on cybersecurity, and ensure compliance with relevant laws and regulations. It emphasizes shared responsibilities, risk management, and the use of national security standards. Information is classified into categories (Restricted, High, Moderate, Low) based on the risk of harm from unauthorized access, guiding the implementation of security controls. The policy also includes principles like location independence, appropriate use, and continuous monitoring to ensure ongoing protection and compliance." and answer this question "Choose one of the laws/regulations listed (i chose AD95 Information Assurance and IT security) and identify the department/units at Penn State that you think would be most impacted by the compliance regulation and explain why ( i chose the GLBA); include information such as the type of data the department/unit handles, the type of systems they might use, etc. "