1. Sorting out IT Policy at Poly U. Ron Heasley Will Krause Tim Logan Mary Schoeler

2. Acceptable Use Policy All university mainframe computer systems and terminals must be used for institutional purposes only.

3. Headlines From The Nation’s Newspaper Alumni Data Stolen from Poly U. Profs Computer at Poly U. Confiscated For Child Porn RIAA Ranks Poly U. #1 In Violations

4. Acceptable use Protection of Personal Data Credit Card, SSN, FERPA, HIPAA, GLBA CopyrightDMCA System SecurityViruses, hackers Intellectual Property Research, patents, TEACH Act Other Email, commercial use of IT resources Areas of Concern

5. What is IT Doing? –Campus firewall –Pushing out virus definitions –System software updates –Daily backups What is the CFO Doing? –GLBA –Internal Audit –HR Policies –Risk Management

6. We need clear policy statements on: Acceptable use Protection of personal data Copyright System security Intellectual property

7. Why have a Policy? Preserve and protect institution Create rules of citizenship

8. Process Committee(s) for policies –Scope –Responsible office –Consequences Procedures Education and Awareness Campaign –Training for faculty, staff and students –Required Training? Ongoing Updates of Policies Timeline/Budget Sample Policy

9. Future Headlines From The Nation’s Newspaper