 |
A. Introduction
Oklahoma State University-Okmulgee (OSU-Okmulgee) attempts to create an environment where university information technologies meet the needs of university programs in research and instruction. As an institution of higher learning, OSU-Okmulgee encourages, supports, and protects freedom of expression and an open environment to pursue scholarly inquiry and to share information. Access to networked computer information in general and to the Internet, in particular, supports the academic community by providing a link to electronic information in a variety of formats and covering all academic disciplines. Consistent with other University policies, this policy is intended to respect the rights and obligations of academic freedom, while protecting the rights of others. The computing and network facilities of the University are limited and should be used wisely and carefully with consideration for the needs of others. Usage of these facilities is a privilege rather than a right. As with any resource, it is possible to misuse computing resources and facilities and to abuse access to the Internet. The following statements address, in general terms, the University's philosophy about computing use. B. Scope
This policy is applicable to all individuals using University owned or controlled computer and computer communication facilities or equipment. It is applicable to all University information resources whether individually controlled or shared, stand alone or networked. It applies to all computer and computer communication facilities owned, leased, operated, or contracted by the University. In addition, a user must be specifically authorized to use a particular computing or network resource by the campus unit responsible for operating the resource. Individual units within the University may define "conditions of use" for information resources under their control. These statements must be consistent with this overall Policy but may provide additional detail, guidelines and/or restrictions. Such policies may not relax or subtract from, this policy. Where such "conditions of use" exist, enforcement mechanisms defined therein shall apply. These individual units are responsible for securing appropriate authorization from Computer and Information Services (CIS) for review and recommendation to the Executive Vice President for final approval. Units must also publicize both the regulations they establish and their policies concerning the authorized and appropriate use of the equipment for which they are responsible. Where use of external networks is involved, policies governing such use also are applicable and must be adhered to. C. Authorized Users
An authorized user is any person who has been granted the privilege by the University to access its computing and network systems and whose usage complies with university policy. Authority to use a particular University computing or network resource should come from the campus unit responsible for operating the resource. D. Authorized Use
Use of University computers must comply with Federal and State laws and University policies. Facilities and accounts are to be used for the activities for which they are assigned. E. Privacy
Following OSU-Okmulgee Policies and Procedures, Oklahoma laws and applicable federal laws, OSU-Okmulgee strives to protect personal privacy and the confidentiality of information. Information will be handled with the strictest of security and confidentiality standards. (Buckley Amendment - Family Rights and Privacy Act, Open Records Act, Federal Electronic Communication and Privacy Act of 1986, Federal Computer Intrusion Laws) F. User's Responsibilities
University policy, ethics and etiquette are required to successfully participate in the OSU-Okmulgee community and are extended to the computing environment. Individuals who share computing resources at OSU-Okmulgee and who also use those resources to access the worldwide network are responsible for knowing and following the Appropriate Computer Use Policy. It is the responsibility of the user to access and use data in accordance with the university's policy and applicable state and federal laws. Access to the information resource infrastructure both within and beyond the University campus, sharing of information, and security of the intellectual products of the community all require that each and every user accept responsibility to protect the rights of the community. Access to the networks and to the information technology resources at OSU-Okmulgee is a privilege granted to University students, faculty, staff, and affiliates who have been granted special permission to use such facilities. Access to University information resources must take into account the following factors: relevant laws and contractual obligations, the requestor's need to know, the information's sensitivity, and the risk of damage to or loss by the University. Anyone who accesses, uses, destroys, alters, or damages University information resources, properties or facilities without authorization, may be guilty of violating state or federal law, infringing upon the privacy of others, injuring or misappropriating the work produced and records maintained by others, and/or threatening the integrity of information kept within these systems. Such conduct is unethical and unacceptable and will subject violators of this Policy to disciplinary action by the University, including possible termination from employment, expulsion as a student, and/or loss of computing systems privileges. Individual users certify understanding and agreement to adhere to OSU-Okmulgee's policies by signing on to OSU-Okmulgee systems. Specifically, an employee acknowledges an understanding of and agreement to adhere to the following:
The University reserves the right to limit, restrict, or extend computing privileges and access to its information resources. Usage is a privilege, not a right. Users are held responsible for their own computer accounts and the usage thereof. Users will be subject to disciplinary action, including termination and/or loss of privileges for misuse of computers or computing systems under their control. G. Special Notifications
The University cannot protect individuals against the existence or receipt of material that may be offensive to them. As such, those who make use of electronic communications are warned that they may come across or be the recipients of materials they find offensive. Those who use e-mail and/or make information about them available on the Internet should be forewarned that the University cannot protect them from invasions of privacy and other possible dangers that could result from the individual's distribution of personal information. Personal use of any University information system to access, download, print, store, forward, transmit or distribute obscene material is prohibited. The University's computing and network systems are a university owned resource and business tool only to be used by authorized individuals for business and academic purposes. Users should never distribute mailing lists owned by the University. The University owns everything stored in its systems unless it has agreed otherwise. The University has the right of access to the contents of stored computing information at any time for any purpose for which it has a legitimate "need to know." The University will make reasonable efforts to maintain the confidentiality of computing information storage contents and to safeguard the contents from loss, but is not liable for the inadvertent or unavoidable loss or disclosure of the contents. The OSU-OKMULGEE Data Communications Network is a mission critical strategic University resource. In order to protect the Data Communications Network, devices that are considered end nodes, other than computers, servers, printers, and workstations must not be plugged into any network port, unless special arrangements are made with CIS and approved by CIS. This includes but is not limited to hubs, switches, repeaters, routers, network modems and wireless access points whose installation has not been coordinated and registered with CIS. These devices may be incorrectly configured or incompatible with the OSU-Okmulgee network causing outages and reliability problems to all or part of the network. Devices not approved for use on OSU-Okmulgee's Data Communication Network will be disabled to ensure the stability and availability of the network. CIS strives to provide high availability and stable network resources relevant to the OSU-Okmulgee community's needs. Departments needing additional network resources should contact the CIS Help Desk. H. Access
Unauthorized access to information systems is prohibited. No one should use the ID or password of another; nor should anyone provide his or her ID or password to another. A password should never be shared, not even with computer support personnel. Users are personally responsible for all activities on their User ID or computer system, including security of their own passwords and may be subjected to disciplinary action and/or loss of privileges for misuse of computers or computing systems under their control, even if not personally engaged in by the person controlling the computer or system. I. Ownership and Rights of Access to Software and Data
OSU-Okmulgee has software and data that have been acquired through a variety of sources. Some software and data, though available for use by all users of OSU-Okmulgee's systems, remain the property of the supplier and the dissemination of the software or data (in any form) is strictly prohibited. This also applies to software made available by non-CIS University personnel. This software is not to be distributed, unless authorized by the person or department that initially secured the software or data. No software or data should be distributed, reproduced or used without ensuring that proper licensing and/or authorization has been obtained. J. Conduct Expectations and Prohibited Actions
OSU-Okmulgee provides computing resources and worldwide network access to members of the OSU-Okmulgee community for legitimate academic and administrative pursuits to communicate, access knowledge, and retrieve and disseminate information. All members of the OSU-Okmulgee community (faculty, staff, students, and authorized guests) sharing these resources also share the rights and responsibilities for their use. Examples of misuse include, but are not limited to:
K. Systems Security Officer
The university's Director of CIS, shall be the primary contact to work in conjunction with appropriate university officials for the interpretation, enforcement and monitoring of this policy and the resolution of problems concerning it. Any issues concerning law shall be referred to the Vice President who may contact Legal Counsel. In situations that are an immediate threat to the security or operation of a computer or network, the Director of CIS may require immediate intervention of access privileges and affected user files or messages. In such an emergency, the Director of CIS will notify, as soon as possible, the appropriate university administrators and users affected by the situation. L. Consequences of Misuse
Misuse of computing, networking, or information is unacceptable, and users will be held accountable for their conduct. Serious infractions can result in temporary or permanent loss of computing and/or network privileges and/or Federal or State legal prosecution. Appropriate corrective action or discipline may be taken in conformance with applicable personnel policies and student policies. Some computer abuses are a crime, (such as illegal reproduction of software protected by U. S. copyright law) and penalties can include a fine and/or imprisonment. Abuse of computing privileges is subject to disciplinary action, including termination of employment. If system administrators have strong evidence of misuse of computing resources, and if that evidence points to the computing activities or the computer files of an individual, they have the obligation to pursue any or all of the following steps to protect the user community:
The Director:
Users, when requested, are expected to fully cooperate with system administrators or the Director of CIS in any investigations of system abuse. Failure to cooperate may be grounds for cancellation of access privileges or disciplinary action, including dismissal. When individual privileges to access University computing resources have been suspended, a user may request that the Director of Computing and Information Services, the Office of the Executive Vice President, or the Office of the Vice President for Student Support and Development review the suspension. The Director of Computing and Information Services, or designee, in his/her discretion, may reinstate privileges, alter any restrictions that have been imposed, or refuse to interfere with the administrative action taken to that time. Further appeals may be filed with the Office of Student Conduct, the University Personnel Office, or the Chair of the Faculty/Staff Council, as appropriate. Failure to comply with these policies, rules and regulations may result in disciplinary action, up to and including dismissal. Any violation of local, state or federal laws may carry the additional consequence of prosecution under the law, where judicial action may result in specific fines or imprisonment, or both; plus the costs of litigation or the payment of damages or both; or all. M. Notification
References to this policy will be in the OSU-Okmulgee Catalog, the Student Rights and Responsibilities policy, the CIS web site and the OSU-Okmulgee Policies and Procedures Letters. N. Application and Enforcement
OSU-Okmulgee shall be responsible for enforcing this Policy in a manner best suited to its own organization. It is expected that enforcement will require cooperation between such departments as computer systems administration, personnel, affirmative action, academic affairs and student affairs. References Other: November 18, 2002 |
