Sorting out IT Policy at Poly U. Ron Heasley Will Krause Tim Logan Mary Schoeler

Acceptable Use Policy All university mainframe computer systems and terminals must be used for institutional purposes only.

Headlines From The Nation’s Newspaper Alumni Data Stolen from Poly U. Profs Computer at Poly U. Confiscated For Child Porn RIAA Ranks Poly U. #1 In Violations

Acceptable use Protection of Personal Data Credit Card, SSN, FERPA, HIPAA, GLBA CopyrightDMCA System SecurityViruses, hackers Intellectual Property Research, patents, TEACH Act Other , commercial use of IT resources Areas of Concern

What is IT Doing? –Campus firewall –Pushing out virus definitions –System software updates –Daily backups What is the CFO Doing? –GLBA –Internal Audit –HR Policies –Risk Management

We need clear policy statements on: Acceptable use Protection of personal data Copyright System security Intellectual property

Why have a Policy? Preserve and protect institution Create rules of citizenship

Process Committee(s) for policies –Scope –Responsible office –Consequences Procedures Education and Awareness Campaign –Training for faculty, staff and students –Required Training? Ongoing Updates of Policies Timeline/Budget Sample Policy

Future Headlines From The Nation’s Newspaper