XII. Computer Use Guidelines

XII.  COMPUTER USE GUIDELINES


 

 

Computer Lab Use Policy

This policy applies to the computer lab facilities available at Virginia Western used in supporting the computing needs of the students, faculty, and staff of the college.  Its purpose is to ensure the equitable, legal, and economical use of these facilities by authorized college users.  The following policies relate to their use:

 

1.     Because of the expenses associated with operating and supporting computing facilities, computer labs are neither designed nor available for use by the general public.  Access is limited to students, faculty, and staff engaged in college related activities only.  Use by others must receive specific approval.

 

2.     Computer equipment and software are to be used in support of the mission of the college and are not to be used for commercial or personal objectives, or non-college related activities.  Staff can and will periodically examine computer records (which may include files, logs, and listings) to diagnose problems and to assure these policies are being followed.

 

3.     In cases where an account is assigned to an individual, it must not be used by others without explicit permission.  The individual is responsible for the proper use of the account, including proper password protection.

 

4.     No user shall attempt to alter in any manner the setup of the hardware or software on individual microcomputers or the central systems (servers and mainframes) unless expressly authorized by support personnel.  Utilization of files from outside sources is highly discouraged due to possible contamination from viruses.

 

5.     Users shall not attempt to gain access to any privileged account or files unless specifically authorized.  This includes access to operating system files and files belonging to other users.  Each user is expected to utilize the computing resources and facilities in a manner which does not infringe upon use of these resources by others.

 

6.     Use of the facilities for required work has priority over use for convenience.  Recreational use of the equipment and software is expressly forbidden.

 

7.     No user shall use any equipment or software in an activity which violates federal, state, or local laws.

 

8.     Computer software protected by copyright is not to be copied except as permitted by law or by the contract with the owner of the copyright.  The number of copies and distribution of the copies may not be done in such a way that the number of simultaneous users exceeds the total authorized for the college.  Private copies of software should not be used on college equipment.  College staff is expressly forbidden to assist in the use of illegally obtained or improperly licensed software.



COMPUTER GUIDELINES

 

VIRGINIA COMMUNITY COLLEGE SYSTEM

 

INFORMATION TECHNOLOGY STUDENT/

PATRON ACCEPTABLE USE AGREEMENT

 

 


Status: Approved 02/22/06

Contact: James Davis


As a user of the Virginia Community College System's information technology resources, I understand and agree to abide by the following acceptable use agreement terms. These terms govern my access to and use of the information technology applications, services and resources of the VCCS and the information they generate.

The college granted access to me as a necessary privilege in order to perform authorized functions at the college where I am currently enrolled. I will not knowingly permit use of my entrusted access control mechanism for any purposes other than those required to perform authorized functions related to my status as a student. These include logon identification, password, workstation identification, user identification, file protection keys or production read or write keys.

I will not disclose information concerning any access control mechanism unless properly authorized to do so by my enrolling college. I will not use any access mechanism that the VCCS has not expressly assigned to me.

I will treat all information maintained on the VCCS computer systems as strictly confidential and will not release information to any unauthorized person. I agree to abide by all applicable state, federal, VCCS, and college policies, procedures and standards that relate to the VCCS   Information Security Standard and the VCCS Information Technology Acceptable Use Standard. I will follow all the security procedures of the VCCS computer systems and protect the data contained therein.

If I observe any incidents of non-compliance with the terms of this agreement, I am responsible for reporting them to the Information Security Officer and management of my college.

I understand that VCCS Information Security Office, or appropriate designated college officials, reserve the right without notice to limit or restrict any individual's access and to inspect, remove or otherwise alter any data, file, or system resource that may undermine the authorized use of any VCCS or college IT resources.

I understand that it is my responsibility to read and abide by this agreement, even if I do not agree with it.  If I have any questions about the VCCS Information Technology Acceptable Use Agreement, I understand that I need to contact the college Information Security Officer or appropriate college official.

By acknowledging this agreement, I hereby certify that I understand the preceding terms and provisions and that I accept the responsibility of adhering to the same. I further acknowledge that should I violate this agreement, I will be subject to disciplinary action.

 



INFORMATION TECHNOLOGY ACCEPTABLE USE STANDARD

 

 


Status: Approved 02/22/06

Contact: James Davis


Thousands of users share VCCS Information Technology resources. Everyone must use these resources responsibly since misuse by even a few individuals has the potential to disrupt VCCS business or the work of others. Therefore you must exercise ethical behavior when using these resources.

State Law (Article 7.1 of Title 18.2 of the Code of Virginia) classifies damage to computer hardware or software (18.2-152.4), invasion of privacy (18.2-152.5), or theft of computer services (18.2-152.6) of computer systems as (misdemeanor) crimes. Computer fraud (18.2-152.3) and use of a computer as an instrument of forgery (18.2-152.14) can be felonies. The VCCS's internal procedures for enforcement of its policy are independent of possible prosecution under the law.


DEFINITION

VCCS information technology resources include mainframe computers, servers, desktop computers, notebook computers, handheld devices, networks, software, data files, facilities, and the related supplies.


Standard

The following standards shall govern the use of all VCCS information technology resources:

1.      All users of VCCS IT resources must adhere to Virginia Department of Human Resource Management Policy.

2.      You must not authorize anyone to use your computer accounts for any reason. You are responsible for all use of your accounts. You must take all reasonable precautions, including password maintenance and file protection measures, to prevent use of your account by unauthorized persons. You must not, for example, share your password with anyone.

3.      You must use your computer resources only for authorized purposes. Students or staff, for example, may not use their accounts for private consulting or to support a personal business venture. You must not use your computer resources for unlawful purposes, such as the installation of fraudulently or illegally obtained software. Use of external networks connected to any VCCS facility must comply with the policies of acceptable use promulgated by the organizations responsible for those networks.

4.      Other than material known to be in the public domain, you must not access, alter, copy, move or remove information, proprietary software or other files (including programs, members of subroutine libraries, data and electronic mail) without prior authorization. The college or data trustee, security officer, appropriate college official or other responsible party may grant authorization to use electronically stored materials in accordance with policies, copyright laws and procedures. You must not copy, distribute or disclose third party proprietary software without prior authorization from the licenser. You must not install proprietary software on systems not properly licensed for its use.

5.      Other than material known to be in the public domain, you must not access, alter, copy, move or remove information, proprietary software or other files (including programs, members of subroutine libraries, data and electronic mail) without prior authorization.

6.      The data owner, data custodian, security officer, appropriate college official or other responsible party may grant authorization to use electronically stored materials in accordance with policies, copyright laws and procedures.

7.      You must not distribute or disclose third party proprietary software without prior authorization from the licenser. You must not install proprietary software on systems not properly licensed for its use.

8.      You must not use any computing facility irresponsibly or needlessly affect the work of others.  This includes transmitting or making accessible offensive, annoying or harassing material.  This includes intentionally, recklessly, or negligently damaging systems, intentionally damaging or violating the privacy of information not belonging to you.  This includes the intentional misuse of resources or allowing misuse or resources by others.  This includes loading software or data from untrustworthy sources, such as free-ware, onto official systems without prior approval.

9.      You should report any violation of these regulations by another individual and any information relating to a flaw or bypass of computing facility security to the Information Security Office or the Internal Audit department.

10.  You must not use the Commonwealth’s Internet access or electronic communication in cases where it:

 

·        interferes with the user’s productivity or work performance,

or with any other employee’s productivity or work performance;

·        adversely affects the efficient operation of the computer

system;

·        results in any personal gain or profit to the user

·        violates any provision of this policy, any supplemental

policy adopted by the agency supplying the Internet or

electronic communication systems, or any other policy,

regulation, law or guideline as set forth by local, State or

Federal law. (See Code of Virginia §2.1-804-805; §2.2-2827

as of October 1, 2001.)

 

Note: Any user of VCCS IT resources employing the Commonwealth’s Internet or electronic communication systems for personal use must present their communications in such a way as to be clear that the communication is personal and is not a communication of the agency or the Commonwealth.

 


ENFORCEMENT PROCEDURE

1.      Faculty, staff , students, and patrons at the college or System Office should immediately report violations of information security policies to the local Chief Information Officer (CIO).

2.      If the accused is an employee, the CIO will collect the facts of the case and identify the offender. If, in the opinion of the CIO, the alleged violation is of a serious nature, the CIO will notify the offender's supervisor. The supervisor, in conjunction with the College or System Human Resources Office and the CIO, will determine the appropriate disciplinary action. Disciplinary actions may include but are not limited to:

a.       Temporary restriction of the violator's computing resource access for a fixed period of time, generally not more than six months.

b.      Restitution for damages, materials consumed, machine time, etc. on an actual cost basis. Such restitution may include the cost associated with determining the case facts.

c.       Disciplinary action for faculty and classified staff in accordance with the guidelines established in the State Standards of Conduct Policy.

3.      In the event that a student is the offender, the accuser should notify the Vice President of Instruction. The VP, in cooperation with the CIO, will determine the appropriate disciplinary actions which may include but are not limited to:

a.       Temporary restriction of the violator's computing resource access for a fixed period of time, generally not more than six months.

b.      Restitution for damages, materials consumed, machine time, etc. on an actual cost basis. Such restitution may include the cost associated with determining the case facts.

c.       Disciplinary action for student offenders shall be in accordance with the college student standards of conduct.

4.      The College President or designee will report any violations of state and federal law to the appropriate authorities.

5.      All formal disciplinary actions taken under this policy are subject to the Commonwealth’s personnel guidelines and the accused may pursue findings through the appropriate grievance procedure.

  


  

INFORMATION TECHNOLOGY EMPLOYEE

ACCEPTABLE USE AGREEMENT

  

 


Status: Approved 02/22/06

Contact: James Davis


As a user of the Virginia Community College System's local and shared computer systems, I understand and agree to abide by the following acceptable use agreement terms. These terms govern my access to and use of the information technology applications, services and resources of the VCCS and the information they generate.

The VCCS has granted access to me as a necessary privilege in order to perform authorized job functions at the institution where I am currently employed. I will not knowingly permit use of my entrusted access control mechanism for any purposes other than those required to perform authorized employment functions. These include logon identification, password, workstation identification, user identification, file protection keys or, production read or write keys.

I will not disclose information concerning any access control mechanism unless properly authorized to do so by my employer. I will not use any access mechanism that the VCCS has not expressly assigned to me. I will treat all information maintained on the VCCS computer systems as strictly confidential and will not release information to any unauthorized person.

I agree to abide by all applicable state, federal, VCCS, and college policies, procedures and standards that relate to the VCCS Information Security Standard   and the VCCS Information Technology Acceptable Use Standard. I will follow all the security procedures of the VCCS computer systems and protect the data contained therein.

If I observe any incidents of non-compliance with the terms of this agreement, I am responsible for reporting them to the Information Security Officer and management of my Institution.

I understand that the VCCS Information Security Office, or appropriate designated college officials, reserve the right without notice to limit or restrict any individual's access and to inspect, remove or otherwise alter any data, file, or system resource that may undermine the authorized use of any VCCS or college IT resources.

I understand that it is my responsibility to read and abide by this agreement, even if I do not agree with it.  If I have any questions about the VCCS Information Technology Acceptable Use Agreement, I understand that I need to contact my immediate supervisor, the local Human Resource Officer, or appropriate college official for clarification.

 

If I refuse to sign this certificate of receipt, my supervisor will be asked to initial this form indicating that a copy has been given to me and that this statement has been read to me.

By signing this agreement, I hereby certify that I understand the preceding terms and provisions and that I accept the responsibility of adhering to the same. I further acknowledge that should I violate this agreement, I will be subject to disciplinary action.

 

Employee/Consultant Name (Print)

 

Date

College/Location)

 

 Department/Office

Employee/Consultant Name (Signature