Gramm – Leach – Bliley Act

Data Security Policy

Information Technology Data Security

Be particularly careful of your password.

Ø      Do not give your password to anyone or type your password when someone is watching.

Ø      Do not write down your password or store it in batch files, automatic login scripts, terminal function keys, or in other locations where another person might discover them.

Ø      Once someone has your password it is possible both to look in your directory and to use your username for malicious purposes.

Ø      Do not log on to a computer/network with your id/password and let another person use your access. >

Ø      Make sure you log off the computer while you step away from your desk for an extended period of time. Staying logged on leaves your id and the system vulnerable for misuse.

Ø      You are responsible for all activities that take place from your account. All activity should be conducted in accordance with their role and responsibilities at the University.

Ø      Additionally, any person attaching a wireless client to any University network (wired or wireless) is responsible for the security of the device and for any intentional or unintentional activities from or to the network pathway that the device is using.

The University takes reasonable steps to protect files stored on the university systems from unauthorized access, however, the University cannot guarantee the confidentiality of any of these files.  The University recommends the installation of personal firewalls on all University owned systems and any computer accessing University computer and network systems. The University offers firewall software to all employees and students for work.

Privacy

The University systems may record information about each user session. Information recorded includes the username/operator id associated with the session, the login and logout dates and times, and the amount and kind of computer resources used during the session. This information is used for legitimate University purposes including issues of law, abuse, security or system managements.

When the University has reasonable belief that system security or system operation has been compromised or it has been used for unauthorized activities, the University has the responsibility and authority to review the contents of all computers including files, programs and emails.

Remember that any printouts in public places are likely to be seen by others.