Felician College. Computer Use Policy. Office of Information Technology 262 South Main St Lodi, NJ 07644-2117



Similar documents
RUTGERS POLICY. Responsible Executive: Vice President for Information Technology and Chief Information Officer

Hillsborough Board of Education Acceptable Use Policy for Using the Hillsborough Township Public Schools Network

Unified Infrastructure/Organization Computer System/Software Use Policy

Norwood Public Schools Internet & Cell Phone Use Agreement School Year

Hillsborough Board of Education Acceptable Use Policy for Using the Hillsborough Township Public Schools Network

GUIDANCE FOR BUSINESS ASSOCIATES

BLUE RIDGE COMMUNITY AND TECHNICAL COLLEGE BOARD OF GOVERNORS

Data Protection Policy & Procedure

COPIES-F.Y.I., INC. Policies and Procedures Data Security Policy

Texas Woman's University University Policy Manual

Supersedes: DPS Policy Internet and Use Of The DPSnet, July 14, 2000 Effective: February 15, 2005 Pages: 1 of 5

VCU Payment Card Policy

Information & Communications Technology ICT Security Compliance Guide (Student)

Woodstock Multimedia, INC. Software/Hardware Usage Policy

Internet and Policy User s Guide

FAFSA / DREAM ACT COMPLETION PROGRAM AGREEMENT

First Global Data Corp.

Yur Infrmatin technlgy Security Plicy

Meopham School Information Technology Code of Conduct

Project Open Hand Atlanta. Health Insurance Portability and Accountability Act (HIPAA) NOTICE OF PRIVACY PRACTICES

Cloud-based File Sharing: Privacy and Security Tutorial Institutional Compliance Office July 2013

HIPAA HITECH ACT Compliance, Review and Training Services

Plus500CY Ltd. Statement on Privacy and Cookie Policy

University of Texas at Dallas Policy for Accepting Credit Card and Electronic Payments

Technical Writing - TheUsers Visa (SHR User Accunt)

Erie Community College. Acceptable Use Policy Last Revision: December 17, College Information Technology Services

Immaculate Conception School, Prince George Bring Your Own Device Policy for Students

Hampton Roads Orthopaedics & Sports Medicine. Notice of Privacy Practices

To clarify terms used within these policies, the following definitions are provided:

DisplayNote Technologies Limited Data Protection Policy July 2014

HIPAA Compliance 101. Important Terms. Pittsburgh Computer Solutions

COMPLIANCE WITH THE FEDERAL TRADE COMMISSION S SAFEGUARDS RULE

WHAT YOU NEED TO KNOW ABOUT. Protecting your Privacy

Williamson County Board of Education Procedures and Guidelines

Privacy and Security Training Policy (PS.Pol.051)

How To Ensure Your Health Care Is Safe

Personal Data Security Breach Management Policy

Key Steps for Organizations in Responding to Privacy Breaches

New York Institute of Technology Faculty and Staff Retention Policy

How To Ensure That The Internet Is Safe For A Health Care Worker

Creating an Ethical Culture and Protecting Your Bottom Line:

FINANCIAL OPTIONS. 2. For non-insured patients, payment is due on the day of service.

THE CITY UNIVERSITY OF NEW YORK IDENTITY THEFT PREVENTION PROGRAM

Information Security Policy

NSW FAIR TRADING. Real Estate Fraud Prevention Guidelines

THIRD PARTY PROCUREMENT PROCEDURES

Employees - recruitment, records and monitoring

Malpractice and Maladministration Policy

Sources of Federal Government and Employee Information

Internet Banking Agreement and Disclosure Statement

The information contained in this site is for INFORMATIONAL purposes only and is protected by copyright. We are not providing legal advice.

ADMINISTRATIVE REGULATIONS TABLE OF CONTENTS

MSB FINANCIAL CORP. MILLINGTON BANK AUDIT COMMITTEE CHARTER

UNITED STATES SECURITIES AND EXCHANGE COMMISSION Washington, D.C FORM WB-DEC

Session 9 : Information Security and Risk

Online Banking Agreement

POLICY 1390 Information Technology Continuity of Business Planning Issued: June 4, 2009 Revised: June 12, 2014

HIPAA Notice of Privacy Practices. Central Ohio Surgical Associates, Inc.

Privacy Plicy Welcme, Sensati & JHI

WHITE PAPER: UNIVERSITY AND COLLEGE COMPLIANCE WITH THE FOREIGN CORRUPT PRACTICES ACT IN CONNECTION WITH FOREIGN ACADEMIC PROGRAMS

FERRIS STATE UNIVERSITY SCHOOL of NURSING CODE of CONDUCT

Process for Responding to Privacy Breaches

MANUAL OF UNIVERSITY POLICIES PROCEDURES AND GUIDELINES. HIPAA: Use and Disclosure of Protected Health Information

Multi-Year Accessibility Policy and Plan for NSF Canada and NSF International Strategic Registrations Canada Company,

How To Get A Credit By Examination

expertise hp services valupack consulting description security review service for Linux

FAYETTEVILLE STATE UNIVERSITY

IT Account and Access Procedure

Purpose Statement. Objectives

Heythrop College Disciplinary Procedure for Support Staff

DETROIT PUBLIC SCHOOLS NETBOOK PARENT CONSENT FORM For 8 th 12 th Grade Students Only

Frequently Asked Questions About I-9 Compliance

Privacy Policy. The Central Equity Group understands how highly people value the protection of their privacy.

NYU Langone Medical Center NYU Hospitals Center NYU School of Medicine

IN-HOUSE OR OUTSOURCED BILLING

Information Services Hosting Arrangements

Columbine Federal Credit Union ONLINE BANKING/ BILL PAYMENT AGREEMENT & DISCLOSURES AND PRIV ACY DISCLOSURE

State Fleet Card Oversight Usage and Responsibilities

Who Defines Fraud, Waste, and Abuse?

How To Write A Scial Media Plicy

Kentwood Police Department 4742 Walma Ave SE Kentwood, Michigan (616) REPORTING IDENTITY THEFT

Data Protection Act Data security breach management

ERISA Compliance FAQs: Fiduciary Responsibilities

ensure that all users understand how mobile phones supplied by the council should and should not be used.

Electronic and Information Resources Accessibility Compliance Plan

THRIFTY DRUG STORES, INC. d/b/a THRIFTY WHITE DRUG / WHITE DRUG / BELL PHARMACY/VALLEY DRUG/ THRIFTY NYSTROM DRUG NOTICE OF PRIVACY PRACTICES

Improved Data Center Power Consumption and Streamlining Management in Windows Server 2008 R2 with SP1

GOVERNORS PHARMACY HIPAA NOTICE OF PRIVACY PRACTICES For Your Protected Health Information

Remote Working (Policy & Procedure)

TITLE: RECORDS AND INFORMATION MANAGEMENT POLICY

Carbonite Recovery Services Cover Sheet

ALBAN CHURCH OF ENGLAND ACADEMY COMPUTER SECURITY POLICY. Approved by Governing Body on: 6 th May 2015

TrustED Briefing Series:

Colorado Rapids Youth Soccer Club Social Media and Electronic Communication Policies

Statement of Work For. Federal Communications Commission. Emergency Mass Notification and Response System

HIPAA Legislation - Key Provisions

ACTIVITY MONITOR Real Time Monitor Employee Activity Monitor

Cell Phone & Data Access Policy Frequently Asked Questions

Version Date Comments / Changes 1.0 January 2015 Initial Policy Released

Transcription:

Felician Cllege Office f Infrmatin Technlgy 262 Suth Main St Ldi, NJ 07644-2117 Cmputer Use Plicy Intrductin - In supprt f Felician Cllege's missin f teaching and public service, the Infrmatin Technlgy (IT) Department prvides cmputing, netwrking, and infrmatin resurces t the Cllege cmmunity f students, faculty, and staff. This plicy regulates the use f all cmputing equipment and netwrk intercnnectins wned r administered by Felician Cllege. These include, but are nt limited t, administrative cmputing resurces, ffice and residence hall persnal cmputers, devices, campus-wide cmputer labratries, smart bards, netwrk servers, thin-client terminals, laptps, ipads, and assciated peripherals such as printers, scanners, cpiers and fax machines. Rights and Respnsibilities - Cmputers and netwrks can prvide access t resurces n and ff campus, as well as the ability t cmmunicate with ther users wrldwide. Such pen access is a privilege, and requires that individual users act respnsibly and adhere t institutinal plicy. Users must respect the rights f ther users, respect the integrity f cmputer and related physical resurces, and bserve all relevant laws, regulatins, cntractual bligatins. Students and emplyees may have rights f access t infrmatin abut themselves cntained in cmputer files, as specified in federal and state laws. Files may be subject t search under curt rder. In additin, system administratrs may access r examine files r accunts that are suspected f unauthrized use r misuse, r that have been crrupted r damaged. Institutinal cmputers and access t institutinal systems and sftware are fr business purpses and the prperty f the cllege. Existing Legal Cntext - All existing laws (federal and state) Cllege regulatins and plicies apply, including nt nly thse laws and regulatins that are specific t cmputers and netwrks, but thse that may apply generally t persnal cnduct. Misuse f cmputing, netwrking, r infrmatin resurces may result in the lss f cmputing privileges. Additinally, misuse can be prsecuted under applicable statutes. Users may be held accuntable fr their cnduct under any applicable Cllege plicies r prcedures. Cmplaints alleging misuse f cmputing resurces will be directed t thse respnsible fr taking apprpriate disciplinary actin. Unauthrized uses f any cmputers, netwrking r infrmatinal resurces are prhibited. Other rganizatins perating cmputing and netwrking facilities that are reachable via the Felician Cllege netwrk may have their wn plicies gverning the use f thse resurces. When accessing remte resurces frm Felician Cllege facilities, users are respnsible fr abiding by bth the plicies set frth in this dcument and the plicies f the ther rganizatins and netwrks. Illegal reprductin f sftware prtected by U.S. Cpyright Law is subject t civil damages and criminal penalties including fine and imprisnment. Examples f Misuse - Examples f misuse include, but are nt limited t, the activities in the fllwing list. Using a cmputer accunt that yu are nt authrized t use. Obtaining a passwrd fr a cmputer accunt withut the cnsent f the accunt wner.

Felician Cllege Office f Infrmatin Technlgy 262 Suth Main St Ldi, NJ 07644-2117 Allwing smene else t use yur accunt. The wner f the accunt is respnsible fr the use (and misuse) f the accunt. The wner must take all respnsible precautins, including passwrd maintenance, t prevent use f the accunt by unauthrized persns. Faculty and staff with access t the Cllege's databases must prperly lg in and ut and when in the database - insure that nly thse with authrized access t the Cllege's databases view their screen. When finished with the database, users must lg ut t bth "free up" cmputer resurces and guard against unauthrized access r viewing. Using the campus netwrk t gain unauthrized access t any cmputer system Knwingly r carelessly perfrming an act that will interfere with the nrmal peratin f cmputers, terminals, peripherals, r netwrks. Knwingly r carelessly running r installing n any cmputer system r netwrk, r giving t anther user, a prgram intended t damage r t place excessive lad n a cmputer system r netwrk. This includes, but is nt limited t, prgrams knwn as, cmputer viruses, Trjan hrses, and wrms. Attempting t circumvent data prtectin schemes r uncver security lphles. Vilating terms f applicable sftware licensing agreements r cpyright laws. This includes the bradcast distributin f cpyrighted material frm electrnic surces. Deliberately r negligently wasting cmputer resurces. This includes, but is nt limited t, printing multiple cpies f a dcument n a Cllege-wned printer, prpagating chain e-mail letters, bradcasting an e-mail message t all system users withut authrizatin, string large files n hst cmputers, running prgrams n hst cmputers that use a disprprtinate share f system resurces, and failing t sign ff frm a mailing list yu have n interest in fllwing. Using electrnic mail t harass thers. Masking the identity f an accunt r machine. This includes, but is nt limited t, sending annymus e- mail. Using Cllege wned cmputing resurces fr any activity that is cmmercial in nature. Psting n electrnic bulletin bards r Internet services materials that vilate existing laws r the Cllege's cde f cnduct. This includes, but is nt limited t, psting bscene r sexually explicit pictures r text t a public n-line cnference, r psting f materials that are slanderus r defamatry in nature. Attempting t mnitr r tamper with anther user's electrnic cmmunicatins; reading, cpying, changing, r deleting anther user's files r sftware withut the explicit agreement f the wner; reading anther persn s e-mail.

Felician Cllege Office f Infrmatin Technlgy 262 Suth Main St Ldi, NJ 07644-2117 All faculty develping curses fr n-line r distance learning must read and fllw the guidelines established by the Cllege's Distance Learning Crdinatr. Presentatins designed n (r run thrugh) the Cllege's netwrk r nn-netwrk equipment must adhere t the guidelines established in this use plicy. Activities will nt be cnsidered misuse when authrized by apprpriate Cllege fficials fr security r perfrmance testing. Treatment f Cnfidential Infrmatin Cnfidential infrmatin generally cnsists f nn-public infrmatin abut a persn r an entity that, if disclsed, culd reasnably be expected t place either the persn r the entity at risk f criminal r civil liability, r damage the persn r entity's financial standing, emplyability, privacy r reputatin. The Cllege is bund by law r cntract t prtect sme types f cnfidential infrmatin, and in ther instances the Cllege requires prtectin f cnfidential infrmatin beynd legal r cntractual requirements as an additinal safeguard. Cnfidential infrmatin includes but is nt limited t: payrll recrds, salary and nn-public benefits infrmatin Scial Security numbers, driver's license numbers, state identificatin card numbers, passprt numbers credit and debit card infrmatin, and financial accunt infrmatin persnnel recrds, including but nt limited t infrmatin regarding an emplyee's wrk histry, credentials, salary and salary grade, benefits, length f service, perfrmance, and discipline individual criminal backgrund check infrmatin individual cnflict f interest infrmatin individually identifiable bimetric infrmatin cmputer system passwrds and security cdes unpublished grant prpsals and unpublished research data unpublished manuscripts and crrespndence budgetary, departmental, r Cllege planning infrmatin nn-public financial, prcurement, health/safety, audit, insurance and claims infrmatin internal investigatin infrmatin, pre-litigatin, and nn-public litigatin and administrative agency charge, audit and inquiry infrmatin student recrds, including but nt limited t student educatin recrds within the meaning f the Family Educatinal Rights and Privacy Act prprietary r intellectual prperty in which the Cllege asserts wnership that is created by Cllege emplyees in cnnectin with their wrk nn-public law enfrcement recrds generated r maintained by the Cllege security ffices

Felician Cllege Office f Infrmatin Technlgy 262 Suth Main St Ldi, NJ 07644-2117 all Cllege attrney-client cmmunicatins and Cllege attrney wrk prduct nn-public dnr and alumni infrmatin patient care recrds including patient benefit plan enrllment, claims, billing matters, and data cncerning human research subjects medical recrds, persnally identifiable medical infrmatin, and all infrmatin designated as "Prtected Health Infrmatin" under the Health Insurance Prtability and Accuntability Act (HIPAA), r therwise prtected by law all infrmatin, materials, data and recrds designated cnfidential by a Cllege unit, by law r by cntract, including infrmatin btained by the Cllege frm third parties under nn-disclsure agreements r any ther cntract that designates third party infrmatin as cnfidential Guidelines: 1. All emplyees with jb duties that require them t handle cnfidential infrmatin are required t safeguard such infrmatin and nly use it r disclse it as expressly authrized r specifically required in the curse f perfrming their specific jb duties. 2. Misuse f cnfidential infrmatin can be intentinal (acts and/r missins), r a prduct f negligence r inadvertence. Misuse includes but is nt limited t: Accessing infrmatin nt directly germane r relevant t the emplyee's specifically assigned tasks Disclsing, discussing and/r prviding cnfidential infrmatin t any individual nt authrized t view r access that data, including but nt limited t third parties, vlunteers, vendrs and ther Cllege emplyees Reckless, careless, negligent, r imprper handling, strage r dispsal f cnfidential data, including electrnically stred and/r transmitted data, printed dcuments and reprts cntaining cnfidential infrmatin Deleting r altering infrmatin withut authrizatin Generating and/r disseminating false r misleading infrmatin, and Using infrmatin viewed r retrieved frm the systems fr persnal r any ther unauthrized r unlawful use. 3. Emplyees wh have been assigned persnal access cdes t wrk with systems that generate, stre r manage cnfidential infrmatin bear the respnsibility fr preserving the cmplete cnfidentiality f such cdes t ensure against unauthrized use by any ther persn. Emplyees wh negligently r intentinally share their system passwrds r accunts with anyne else fr any reasn will be held respnsible fr any resulting misuse f the system by thers.

Felician Cllege Office f Infrmatin Technlgy 262 Suth Main St Ldi, NJ 07644-2117 4. Emplyees wh have any reasn t believe r suspect that smene else is using their persnal access cdes must immediately ntify their supervisr. 5. Emplyees are prhibited frm lgging nt Cllege databases and administrative systems with their persnal access cdes and then permitting anther persn t access infrmatin in thse data bases and/r systems. 6. Student educatin recrds are gverned by the Family Educatinal Rights and Privacy Act (FERPA) and applicable Cllege plicy ( see the Student Handbk ) http://www.felician.edu/sites/default/files/student_handbk_2013.pdf. FERPA-prtected student educatin recrds must nt be disclsed under any circumstances absent the express cnsent f the Cllege student (r frmer student) r as authrized by the Cllege's Legal Cunsel r the Cllege's Registrar. Althugh FERPA als permits the Cllege t disclse student directry infrmatin (as defined by FERPA), n such infrmatin may be disclsed until the Office f the Registrar has cnfirmed that the student has nt elected t blck his r her directry infrmatin, as permitted by FERPA. 7. Emplyees are expected t: Identify cnfidential infrmatin and materials Practively seek infrmatin regarding and cmply with any restrictins n the use, administratin, prcessing, strage r transfer f the cnfidential infrmatin in any frm, physical r electrnic Learn abut and cmply with any prcedures regarding the apprpriate handling f such infrmatin and materials Understand their respnsibilities related t infrmatin security 8. Emplyees wh have access t cnfidential infrmatin are expected t knw and understand assciated security requirements, and t take measures t prtect the infrmatin, regardless f the data strage medium being used, e.g., printed media (frms, wrk papers, reprts, micrfilm, micrfiche, bks), cmputers, data/vice netwrks, physical strage envirnments (ffices, filing cabinets, drawers), and magnetic and ptical strage media (hard drives, diskettes, tapes, CDs, flash drives). Cmputer display screens shuld be psitined s that nly authrized users can view cnfidential infrmatin, and cnfidential infrmatin shuld be discarded in a way that will preserve cnfidentiality (e.g., in a shred bx, nt in a trash can r recycling bin). 9. In many instances, emplyees will be required r expected t attend training relevant t the infrmatin/materials being handled. Emplyees wh are hired int psitins that require adherence t gvernment-mandated cmpliance (e.g., HIPAA, Medicare Cmpliance, grant and cntract administratin, pathgens r select agents) will be subject t strict prcedures fr handling such materials, must attend all mandated training sessins, and cmply with cmpliance-specific plicies and applicable law.

Felician Cllege Office f Infrmatin Technlgy 262 Suth Main St Ldi, NJ 07644-2117 10. Emplyees must ntify the Cllege f any vilatin f these guidelines. Emplyees may reprt their cncerns immediately t their supervisr, department head, r central Cllege administratin Enfrcement - Emplyee misuse f cnfidential infrmatin and/r the systems in which the infrmatin is stred is a serius breach f jb respnsibilities Penalties fr vilatin f this plicy may be impsed under ne r mre f the fllwing; Felician Cllege plicies and regulatins, the-laws f the state f New Jersey; and the laws f the United States. Penalties may include lss f access t Cllege cmputing resurces, either temprarily r permanently, suspensin r terminatin. Minr infractins f this plicy will be handled by persnnel frm the IT Department in an infrmal manner. Serius vilatins will be referred t the apprpriate Cllege authrities fr frmal investigatin and actin accrding t established prcedures. I HAVE READ AND AGREE TO THE FOLLOWING TERMS AND CONDITIONS Emplyee Signature