1 / 20

Darton College

Darton College. Information Systems Use Policies. Introduction. Darton’s Information Systems are critical resources. The Information Systems Use Policies provide guidelines for access, use and protection of these resources.

jerzy
Download Presentation

Darton College

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Darton College Information Systems Use Policies

  2. Introduction • Darton’s Information Systems are critical resources. The Information Systems Use Policies provide guidelines for access, use and protection of these resources. • Resources shall be used in an approved, ethical, and lawful manner. Students and Personnel shall contact the Chief Information Officer prior to engaging in any activities not explicitly covered by these policies.

  3. Purpose • Ensure that Users abide by state and federal laws, as well as Darton and University System policies • Ensure that all individuals accessing or using the Information Systems assume responsibility for protecting these resources from unauthorized access, modification, destruction or disclosure • Ensure the integrity, reliability, and availability of the Information Systems • Ensure that individuals do not abuse the College’s Information Systems and do respect the rights of other members of the College Community

  4. Anti-Virus Software Policy • Requires mandatory use of Anti-virus protection on Windows and Macintosh computers • Applies to anyone at Darton with a personal computer connected to the College network • Requires all computers connected to the College network have a copy of Anti-Virus software with current virus definitions installed (Note: Campus owned computers are covered under the McAfee contract and are automatically updated.)

  5. Data Stewardship and Access Policy • Defines “College Information” and how it will be controlled and accessed • Applies to anyone at Darton who accesses College Information • Access to College Information requires approval by the appropriate Data Steward; • Examples: Student Data, Financials Data, Human Resource Data, Facilities Data, Auxiliary Data, Information Technology Data

  6. Disaster Recovery and Data Backup • Requires backup of critical systems ensuring effective resumption of vital functions in the event of unscheduled interruptions • Backup of data on user desktops • Applies to anyone at Darton with data stored on their personal office computer • Backup of data on critical servers • Applies to anyone at Darton responsible for maintaining a server

  7. Disposal of Media Policy • Requires proper disposal of electronic media containing sensitive data • Applies to anyone at Darton storing identity or personal information about other people on electronic media • Users are responsible for taking appropriate steps to ensure that all computers and electronic media are properly sanitized before disposal

  8. Email System Acceptable Use and Security Policy • Describes how College email systems will be managed and protected • Applies to anyone at Darton who uses email • Recommendations: • Use strong passwords • Do not send confidential information via email • Follow procedures when sending email messages to large numbers of Darton recipients

  9. Inappropriate Jokes Chain Letters Sales Promotions – Business or Personal Unapproved Not for Profit Promotions Appropriate Darton Business Related Messages Darton Clubs Darton Organizations Darton–sponsored Not for Profit Promotions Usage of Darton Faculty/Staff Email List

  10. Information Systems Ethics Policy • Requires appropriate and civil use of network resources • Describes institutional protection of user information • Applies to anyone at Darton using the College’s computing and networking resources • Read the “Appropriate Use” and “College Access to User’s Information (Privacy)” sections for more information

  11. Internet Services (Server) Registration Policy • Requires registration of all devices connected to the College network that serves information to users both on and off–campus • Applies to anyone at Darton installing a server • Register the server and apply security patches • See the Procedures section for details

  12. Minimum Information Security Environment Policy • Describes minimum precautions for securing computing devices and access to the Darton network • Applies to anyone at Darton using computers or having responsibility for a server • Don’t use computers or systems you are not authorized to use • Don’t send an email as if you were someone else • Follow the rules for generating strong passwords • Don’t share User IDs and passwords • Don’t attempt to defeat the security of information systems

  13. Network Connection of Surveillance System Cameras • Describes approval and configuration requirements for video systems used to protect resources or personnel • Applies to anyone at Darton planning to install a digital surveillance system • Contact the Chief Information Officer prior to acquisition and installation of any surveillance equipment

  14. Remote Access Policy • Requires that off-campus access to network and systems are through approved methods only • Applies to anyone at Darton providing access to local servers from off-campus locations • Describes the use of a Virtual Private Network (VPN) client for authentication and encryption when accessing a Darton network or information system from off-campus • See Procedures for more details

  15. Reporting and Handling Security Incident Response Policy • Describes the steps for reporting and handling security incidents • How to report an incident • How to manage incidents • Guidelines for collection and sharing of information • Applies to anyone at Darton using computers or having responsibility for security

  16. Sensitive Information Protection Policy • Describes methods for protection of systems holding Social Security Numbers, credit card numbers, and other identity or personal information • Applies to anyone at Darton storing identity or personal information on desktops or servers • Read this policy if you are responsible for storing • Bulk social security numbers • Credit card numbers or bank account numbers • Information covered under HIPAA • Student data on a server or your personal workstation • Contact the Chief Information Office for more information

  17. Student Computer Access Policy • Describes the requirement for students to have access to computers for Darton College course work • Applies to students at Darton • All students must have access to a computer; it is the responsibility of the students to ensure their access to computers • At a minimum, student–accessible computers must provide access to the worldwide web, spreadsheet capability, and word processing

  18. Wireless Access Policy • Describes WiFi/802.11 access through centrally managed authenticated methods • Applies to anyone using a wireless device at Darton • Read the Procedures sections on “Configuration, Installation, and Management” and “Unauthorized Access Points” for more information

  19. Locations of Information Systems Use Policies www.darton.edu MyDC

  20. Questions and Answers Margaret Bragg – Director, OIT Chief Information Officer (229)430-6704

More Related