- Abuse of Computers and Network Systems
-
All members of the Delta State University community must use electronic communications in a responsible manner. The University may restrict the use of its computers and network systems for electronic communications, in response to complaints presenting evidence of violations of other university policies or codes, or state or federal laws. Specifically, the university reserves the right to limit access to its networks through university-owned or other computers, and to remove or limit access to material posted on university-owned computers. The university reserves the right to limit access to its networks through university-owned or other computers, and to remove or limit access to material posted on university-owned computers.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Education Records: Records specifically related to a student and maintained by an educational institution or a party acting on its behalf. The Family Educational Rights and Privacy Act of 1974 protects these records.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
PROCEDURES and RESPONSIBILITIES
The use of computers or network systems in no way exempts any member of the University community from the normal requirements of ethical or legal behavior in the Delta State community. In particular, data, software, and computer capacity have value and must be treated accordingly. Use of a computer and network system that is shared by many users imposes certain additional obligations.
Legitimate use of a computer or network system does not extend to whatever an individual is capable of doing with it. Although some rules are built into the system itself, these restrictions cannot limit completely what an individual can do or can see. In any event, each member of the community is responsible for his/her actions whether or not rules are built in, and whether or not they can be circumvented.
Members of the University community are expected to follow certain principles of behavior in making use of computers and network systems, in particular, to respect, and to observe policies and procedures governing:
- the privacy of or other restrictions placed upon data or information stored in or transmitted across computers and network systems, even when that data or information is not securely protected;
- an owner's interest in proprietary software or other assets pertaining to computers or network systems, even when such software or assets are not securely protected;
- the finite capacity of computers or network systems by limiting use of computers and network systems so as not to interfere unreasonably with the activity of other users.
Members of the University community also are expected to follow all other policies, rules, or procedures established to manage computers or network systems, including those established to control access to, or the use of, computer data, files, or other information.
Nuisance email or other online messages such as chain letters, obscene, harassing, or other unwelcome messages are prohibited. Those individuals connected with the distribution of such messages will be subject to the violation policies set forth in this policy. Violation may include immediate suspension of computer account and network access pending investigation of circumstances and may lead to eventual revocation of privileges. Serious violations will be referred directly to the appropriate University or outside authorities; unauthorized use of University computing facilities can be a criminal offense. The penalties may be as severe as suspension or dismissal from the University and/or criminal prosecution.
Bandwidth usage among students has increasingly become a nation-wide concern for everyone in American colleges and universities. On the one hand, faculty and administrative units must have ample bandwidth with which to pursue the mission of the institution. On the other hand, students, for whom Internet services have become both the means of education and entertainment, have good reasons also to be on line, especially when the university is their home.
Delta State University has proved no exception to the national trend. In order to accommodate the administration and faculty as well as dormitory users, DSU systems engineers reserve the right to make decisions to reduce dormitory bandwidth to a maximum percentage of university network capacity when such need arises. This restriction will be done with the knowledge and consent of the President's Cabinet and under the supervision of the Executive Assistant to the President and Chief Information Officer.
The policy on “Abuse of Computers and Network Systems” explicitly states that the university, recognizing “the finite capacity of computers or network system,” may do so “by limiting use of computers and network systems so as not to interfere unreasonably with the activity of other users.” Please note, using bandwidth for legal purposes is not a violation of university policy, but university policy does require that the Office of Information Technology allocate that bandwidth usage appropriately and fairly.
All network devices (hubs, routers, switches, wireless access points) shall be managed by the Office of Information Technology (OIT) as property of Delta State University (DSU). The OIT will propose a wireless network plan to be followed by the campus community. Devices that are installed, other than those installed by OIT, may be subjected to being shut down. The OIT must maintain the integrity of the network in order to manage the quality of the service. Therefore “rogue” hubs, wireless APs, and switches will not be permitted.
- Violators of this policy will be dealt with according to the details outlined in the University’s Responsible Use of Electronic Communications policy.
- Those who cannot accept these standards of behavior will be denied use of Delta State computers or network systems.
- Violators may also be subject to penalties under University regulations and under state and federal laws.
- Anti Virus
-
Members of the Delta State University community are expected to perform their scholarly and scientific activities in a safe-computing environment. The University will vigorously investigate allegations of computer virus activity on campus, as well as malicious code that would adversely affect the academic or administrative computing environment.
The purpose of this policy is to describe the responsibilities of individuals, departments and the Office of Information Technology Services (OIT) in protecting Delta State University (DSU) computer systems against virus infections. A virus infection is almost always costly to the institution whether through the loss of data (possibly permanent), staff time to recover a system, or the delay of important work.
Computer virus: A piece of self-replicating code, most often a malicious software program designed to destroy or damage information on computers. Some viruses cause no damage, but a significant number are specifically designed to cause data loss. Potential sources of viruses include shared media such as floppy disks or CDs, e- mail (specifically, e- mail attachments), and documents downloaded from the Internet.
PROCEDURES and RESPONSIBILITIES
Computer viruses can be very destructive, and at times catastrophic, if not handled swiftly and correctly. It is critical that if a department suspects that they have a virus on a computer that they contact OIT immediately. The campus site license antivirus program should be installed on every computer on campus in order to prevent a computer virus from infecting the campus. If the user does not have this program installed, or the program has been disabled, then the entire campus is at risk for infection or repercussions from the virus may affect the campus as a whole. The following information details how the campus can avoid and prevent a virus, and how to handle the situation once a virus is suspected or detected.
If you have concern regarding a computer virus on campus, or there is suspicion that a virus resides on any DSU computers or resources, please contact the OIT department immediately for assistance. If you suspect that someone has inadvertently or intentionally sent you a computer virus, please notify the OIT department for assistance. Over 90% of computer viruses are inadvertently spread by email.
- Negotiate campus site-licenses (PC and Mac) for virus protection software that result in cost-effective solutions for campus units. Communicate these solutions to departments. Provide the chosen site-license at no cost to the departments or provide an opportunity for departments to purchase licenses at a rate that corresponds to the number of computers in the department and reflects the discount achieved through bulk purchasing.
- Pursue server-based solutions as they become available to stop the propagation of viruses through University systems and networks.
- Provide training to participating departments on virus protection.
- Work with participating departments to install virus software on all computers.
- Assist individuals with recovery from infections by providing swift and accurate advice and assistance at the level the user and the situation require. This includes containment to stop the spread, disinfecting to clean the system, and the capture of incident information for future use.
- Ensure requests for assistance from participants receive a higher priority than those who do not participate in the OIT-negotiated solution.
- Perform trend analysis to locate problem areas and identify high-risk users where special actions may need to be taken. In cases of risk to other campus systems, take appropriate action to thwart the spread of the virus (for example, block outgoing data from infected systems).
- Proactively notify the campus of viruses as soon as they are known to be in circulation or that there is a threat to the campus.
- Ensure that all OIT public and teaching lab computers and other shared systems are adequately protected and that someone in the department has been designated as being responsible for their maintenance and upkeep.
- Ensure that all virus definition files are current, usually updated on a daily basis.
- Ensure that site licensing is maintained to prevent further incidents of virus outbreaks on campus.
- Ensure that all departmental computers are running current virus protection software either through the OIT-negotiated solution (referred to in this policy as “participating departments”) or another option.
- Designate a local contact for departmental virus protection and other computer related issues to assist OIT in the education of the user community and virus response.
- Schedule a mandatory-attendance workshop for all departmental computer users(including student employees)in which OIT staff and the departmental contact train departmental users on protecting their systems. This session will be held annually, at a minimum.
- Ensure that all departmental lab computers and other shared systems are adequately protected and that someone in the department has been designated as being responsible for their maintenance, with assistance and coordination with OIT.
- Make every effort to ensure that materials used on campus are virus free, up to and including scanning of all uploaded documents.
- Report all virus incidents to the OIT User Support Services Help Desk at once. Provide the following information if known: virus name or type, extent of infection (single PC, LAN, etc.), source of virus, and potential recipients of infected material. Note the distinction between receiving an e-mail message that contains a virus-laden attachment versus allowing a virus to infect a computer. Most active computer users receive e-mail messages that contain viruses on a daily or weekly basis. By knowing the proper way to dispose of these messages, users can prevent any harm from coming to the system. Only cases of infections or possible infections need to be reported.
- Remove from the network any computer known to be infected or where infection is suspected, until it can be disinfected. This can be accomplished simply by removing the network cable from the wall connection. Physically disconnect the computer from the network in order to prevent further spreading of the virus.
- Update your virus protection software and/or data files frequently (weekly at a minimum). The campus site license software that is installed on campus computers will automatically update daily, unless circumvented by the user.
- Perform frequent auto-scans for viruses (daily recommended) on desktop systems. OIT will configure your desktop system to perform frequent auto-scans. Do not alter these settings without consultation with OIT.
- Exercise extreme caution when opening attachments. Never open an attachment unless it is expected even if it is from a trusted user. The majority of viruses come from attachments to email messages.
- Include any removable media in the scan. Diskettes are often used to spread viruses.
- Allow OIT to install or have you install any recommended security patches for the operating system and applications that are in use.
- Exercise extreme caution when downloading files from the Internet. Only download from reputable sites
- Exercise reasonable caution when installing files from removable media such as CDs. Even “shrink-wrapped” software has been known to contain viruses.
- Perform regular backups of the data on individual desktop systems in the event of a disaster. OIT is not responsible for lost data under any circumstances.
- Understand if OIT responds to a virus incident and finds that the infected desktop system is not running virus protection software, or that virus protection software has been disabled, then the individual must agree to either allow the OIT technician to install the campus site license antivirus solution or they must agree to purchase, install and properly use the software to prevent future incidents.
- Limit personal use to a minimum to reduce the possibility of receiving a virus on a University-owned computer.
- Read the policy on Responsible Use of Electronic Communication. Allowing a computer system to become infected puts other University systems at risk and, in the extreme, is a violation of the Responsible Use of Electronic Communication policy in force on the DSU campus.
Anyone suspected of deliberately unleashing a computer virus on the DSU campus will be handled according to all policies in place at the University. The individual will be reported to his respective supervisor. The University reserves the right to enforce the sanctions as outlined in the Responsible Use of Electronic Communication policy, and other resources that may be available at the time of the incident. The individual may also be subject to local, state, and federal laws and will be prosecuted to the fullest extent possible. For details on violations, reporting violations, and how such violations are handled, please refer to the policy on Responsible Use of Electronic Communication.
If unsure whether a violation has occurred, contact OIT to evaluate the situation. From there, appropriate channels will be followed.
- Appropriate Electronic Storage
-
This policy establishes the standards for appropriate use of University storage, both network and local desktop storage. University storage resources are not unlimited and must be managed to ensure adequate space is available for new resources. University storage space is reserved for business critical information and is to be used for appropriate work-related storage of such information.
Storage Space: The disk space available to store official University communications and resources
Active Directory: The directory structure used on Microsoft Windows based servers and computers to store information and data about network and domains and manage University connections to resources
PROCEDURES and RESPONSIBILITIES
University storage space is reserved for business critical information and is to be used for appropriate work-related storage of such information. Individuals are not authorized to store personal information, photos, video and music files on University centralized storage systems.
Copyrighted material
Do not store files containing copyrighted material on University servers or University owned systems. Any file determined to have copyright that the University does not have permission, license or ownership of that is stored on University servers will be removed at any time without notice. This includes files that you as an individual may own the copyright license or permission as those copyright licenses are not transferrable without appropriate documentation.
Music, video and multimedia files
Storing of video, music and multimedia files on shared server resources is inappropriate regardless of copyright. These files will be the first files removed whenever there is a disk space shortage.
Centralized Storage Backup
All University centralized storage servers are backed up on a daily basis for critical systems recovery. In order to preserve the integrity of the systems while recognizing that finite resources are available, these backups will not include audio, video, or application programs unless part of the core operations of the University or the academic Unit. Questions regarding status of items will be directed to the key administrator for the academic or administrative unit. The backups will include critical University data and appropriate work related items stored on University storage systems.
- Appropriate Use of Computing and Network Resources
-
Delta State University's computing and network facilities service a large number of faculty, students, staff, and others. In light of the legal responsibilities inherent in the operation of such a system, the University has a number of areas of potential liabilities. This policy sets forth the privileges of and restrictions on students, faculty, staff and other users in respect to the computing and telecommunications systems at Delta State University.
Electronic Communications: The use of computers and network systems in the communicating or posting of
information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other
similar devices that are administered by the university and for which the university is responsible.
Throughout this policy, the shortened term "university systems" is used to mean all university computers and
network systems.
All users have the responsibility to use the University computing systems in an effective, efficient, ethical, and lawful manner. Use of Delta State University's communication resources and computer network is not a matter of right, nor is it provided as a public forum, but rather all use of Delta State University's computer resources and network must be consistent with the mission of the University in support of public education, research, and public service.
GUIDELINES
Security:
- Computer accounts, passwords, and other types of authorization are assigned to individual users and should not be shared with others.
- The individual is responsible for all activities associated with their unique username/ password.
- The user must comply with the University’s password policies, quota policies, usage policies, and all University policies.
Academic Freedom:
Free expression of ideas is central to the academic process. However, the University may remove any electronic information from its systems if it is determined that:
- The presence of the information involves illegality (e.g., copyrighted material, software used in violation of a license agreement).
- The information in some way endangers computing, network resources, or the information of other users (e.g., a computer worm, virus, or other destructive program).
- The information is inappropriate, because it is inconsistent with the mission of the University, or is otherwise not in compliance with the legal and ethical usage governed by Federal or State law or regulation, or with the University or Institutions of Higher Learning policies.
- The cost of maintaining the information is deemed prohibitive by the responsible administrative unit.
- The user is no longer authorized for access.
Privacy:
It is the policy of the University not to routinely monitor individual use of computing and network resources. However, users should be aware that their use of these resources may not be private. Communications made by means of university computing and network resources are also generally subject to the Mississippi Public Records Act to the same extent as they would be if made on paper. The normal operation and maintenance of the university's computing and network infrastructure require the backup of data and communications, the logging of activity, the monitoring of general usage patterns and other such activities that are necessary for the provision of service.
The University may monitor the activity and accounts of individual users, including individual login sessions, personal computers, and the content of individual files and communications when:
- The user has voluntarily made them accessible to the public, as by posting to social networking site or posting to a web page or UseNet group;
- It reasonably appears necessary to do so to protect the integrity, security, or functionality of computing and network resources or to protect the university from liability;
- There is reasonable cause to believe that the user has violated or is in violation of university policy;
- Or it is otherwise required or permitted by law.
Any monitoring of individual users, other than that allowed by the user or that is necessary to respond to perceived emergency situations, must be authorized in advance by the appropriate Vice President and the Chief Information Officer.
The University, in its discretion, may disclose the results of any such general or individual monitoring, including the contents and records of individual files and communications, to appropriate university personnel or law enforcement agencies and may use those results in appropriate university disciplinary proceedings.
Inappropriate Usage:
Computing and networking resources should be used only in accord with the guidelines defined in this policy and procedure, all University policies, and state and federal laws. Examples of inappropriate and unacceptable use of computing and networking resources include, but are not limited to:
- Harassment of other users
- Violation of local, state and federal laws, regulations, or policies.
- Destruction of or damage to equipment, software, or data belonging to Delta State University or other users.
- Disruption or unauthorized monitoring of electronic communications.
- Violations of computer system security measures.
- Unauthorized use or attempted use of computer accounts, access codes, passwords, ip addresses, or other network identification words or numbers assigned to others.
- Violation of another user's privacy.
- Academic dishonesty (e.g., plagiarism or cheating).
- Commercial advertising or political campaigning.
- Downloading or displaying obscene or pornographic materials/images.
- Use of computer and/or network facilities in ways that impede the computing activities of others or the University systems, including randomly initiating interactive electronic communications or e-mail exchanges, overuse of interactive network utilities, overuse of network accessible Internet sites (including gaming, social networking sites, streaming media sites and file download sites) bulletin boards or conferences, and the "off topic" posting of materials to bulletin boards or conferences.
- Use of computing facilities for commercial or business purposes of the user.
- Use of residential network access to conduct business for any purpose is strictly prohibited. Violators will be subject to loss of network services to their residence while a student or resident at Delta State University.
- Violations of trademarks, patents, or copyrights and violation of software license agreements. (Refer to policies of the university.)
- Violation of the usage policies and regulations of the network that Delta State University is a member of or has authority to use.
- Users may not intentionally or negligently disrupt or damage University computers or networks in any way.
- Users of University technology resources may not send electronic messages with the sender's identity forged or send anonymous messages.
Personal use:
Incidental personal use of computing and network resources is permitted, subject to the restrictions outlined in this policy. Personal communications and files transmitted over or stored on University systems and assets are not treated differently from business communications; therefore, there can be no guarantee that personal communications or activities will remain private or confidential.
Sanctions
Violation of the policies described herein for use of computing and network resources are dealt with seriously. Violators may and are subject to the disciplinary procedures of the University, up to and including termination. In addition, violators may lose computing privileges. Illegal acts involving Delta State University computing and networking facilities may also be subject to prosecution by state and federal officials.
Applicable Mississippi Laws that apply to this policy
Mississippi Code of 1972 - http://www.mscode.com/free/statutes/97/045/0011.htm
- Bandwidth Utilization Policy
-
DSU and the Office of Information Technology prioritize network traffic in order to ensure that critical communications are not adversely affected. DSU obtains Internet bandwidth based on past trends and usage statistics. While every effort is made to accommodate all campus users, this is a finite resource. Unexpected demand may cause degradation of services.
None
PROCEDURES and RESPONSIBILITIES
Network bandwidth is controlled by the Office of Information Technology in order to ensure the needs of the University community are met within the established budgetary constraints. DSU reserves the right to make decisions to reduce bandwidth to select areas when the need arises. This restriction will be done with the knowledge and consent of the Chief Information Officer.
Guidelines:
University policy requires that the Office of Information Technology allocate bandwidth usage appropriately and fairly while working to ensure that access to critical communications is not adversely affected. Priority will be given to academic and business operations. The university reserves the right to restrict access to certain sites, including entertainment sites, gaming sites, streaming media, broadcasting sites, peer to peer sites, and others as identified.
- Commercial Use of University Resources
-
University resources may not be used for commercial purposes, unless permission has been explicitly granted in writing by the University President as outlined below.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
PROCEDURES and RESPONSIBILITIES
Use of University systems for commercial purposes, except where explicitly approved, is strictly prohibited. Such prohibited uses include, but are not limited to, development of programs, data processing or computations for commercial use and preparation and presentation of advertising material, sharing of computers or files for commercial purposes; sharing of computers, files, or materials that are copyrighted, whether for financial or non-financial gain; use of University web resources to conduct business over the Internet; use of infrastructure through dormitory access to support or conduct any form of business on the Internet or for gainful employment. Violations of this policy will be strictly enforced.
The DSU University computing system will not be used for financial gain for any faculty, staff, or student member unless explicit, written communication has been granted by the President of the University.
Regulations set in place in the student handbook may also apply to this regulation.
Violations of these policies may result in the immediate suspension of computer account and network access pending investigation of circumstances and may lead to their eventual revocation. Serious violations of the policy will be referred directly to the appropriate University or outside authorities. Unauthorized use of University computing facilities can be a criminal offense. The penalties may be as severe as suspension or dismissal from the University and/or criminal prosecution.
Violators of this policy will be dealt with according to the details outlined in the University’s Responsible Use of Electronic Communications policy. Those who cannot accept these standards of behavior will be denied use of Delta State computers or network systems.
- Computer Labs
-
Delta State University provides several computer labs on campus for use by the staff, faculty, and students. The labs will be used according to the following procedures.
University Computing Labs are to be used by the University community for university purposes only.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
PROCEDURES and RESPONSIBILITIES
The Office of Information Technology (OIT) in conjunction with the Executive Assistant to the President will determine the need for additional computer lab facilities on the DSU campus. Equipment and software purchased and/or installed for the campus computing labs will be determined by the Office of Information Technology. All departments desiring a computer lab facility for departmental or college/school use, must coordinate the planning and development of such a lab with the full cooperation and approval of the Office of Information Technology. Funding for the creation and installation of labs will be determined by the Chief Information Officer and the Executive Assistant to the President.
Maintenance (installation and service of any hardware, software, or comparable services) of computer labs on campus will be performed by the Office of Information Technology. Under no circumstances is any third party approved to perform any work, installation of software, repair services, or equipment installation services without the express approval and cooperation of the Office of Information Technology.
Those departments and instructors who would like course specific software installed in the University public computing labs for the University to use, must have the approval of OIT before departmental/course specific software is purchased or assigned for purchase by the students for coursework. Once the software has been approved and has been verified to work with existing computing resources, including University approved and purchased software, the OIT will work with the department and the instructor(s) to install said software in the University public computing labs, and departmental labs where necessary.
It is the responsibility of the course instructors and their department head to notify OIT of software needs for any existing courses or for courses being considered to be added to the curriculum. In the spring of each academic year, OIT prepares the lab image for the following year. At this time, departments will be asked to provide to OIT a copy of any software that is currently being evaluated for the fall semester along with legal licensing. OIT will make every effort to work with each department on campus to ensure that the software chosen by the course instructor is installed in campus labs for each course. Each department and/or instructor should contact OIT as soon as possible to determine if the software they are evaluating will work with University computing resources. Every effort will be made to find a software solution that will meet the needs of the instructor, department, and the campus while working well with the University approved software and hardware. Once the software has been verified by OIT to work with existing resources and the department has purchased the necessary licensing, OIT will assume responsibility for installing the software in the University Computing Labs.
The University lab “image” is finalized by August 1 of each year. Departments should make every effort to have their software requests turned in by that time. Software additions during the semester will require a three-week lead time with no guarantee of completion.
The following rules and regulations are posted in each computer lab on the DSU campus. Anyone using the labs or visiting the labs is subject to the rules listed below:
Computer Use Policies
· No University system may be used for purposes that violate University statutes or regulations, or for illegal or criminal purposes. Please keep in mind that many people use University systems for daily work. Obstructing this work by consuming gratuitously large amounts of system resources (disk space, CPU time, print quotas, and network bandwidth) or by deliberately crashing the machine(s) will not be tolerated.
· Use of any University system by outside individuals or organizations requires special permission from the system's administrator and payment of fees to the University and to the appropriate software vendors where applicable.
· Use of University systems for commercial purposes, except where explicitly approved, is strictly prohibited. Such prohibited uses include, but are not limited to, development of programs, data processing or computations for commercial use and preparation and presentation of advertising material.
· Copying, storing, displaying, or distributing copyrighted material using University systems or networks without the express permission of the copyright owner, except as otherwise allowed under the copyright law, is prohibited. Under the Federal Digital Millennium Copyright Act of 1998, repeat infringements of copyright by a user can result in termination of the user's access to University systems and networks.
· Sending electronic mail that is obscene, abusive, threatening, or harassing is not allowed. It is a criminal offense to fraudulently represent yourself with electronic mail.
· Copying of software is forbidden. It is illegal for you to make copies of licensed software.
Lab Procedures
· Frivolous, disruptive, or inconsiderate conduct in computer labs or terminal areas is not permitted.
· No University computing facility may be used for playing computer games or Internet driven computer games.
· The use of cell phones is prohibited in University Computing Labs. Any occurrence is cause for suspension or revocation of user privileges.
· Use of the lab must not violate University policies or procedures, local, state, or federal law, and must not be an academic or non-academic offense as defined in the document Student Handbook.
· Food, drinks, smoking, and tobacco are not allowed. Please help us keep the lab clean by following this rule.
· Keep the lab neat. Please pick up your scrap paper, clean up around the computer and push in your chair when finished.
· Inappropriate use of the computer equipment or the lab will result in termination of lab privileges. All users will abide by the DSU Computing Guidelines at all times.
· University Computing Labs are to be used for the completion of assigned class work or university-related work only.
· All users of University Computing Labs shall obey directions regarding reasonable conduct and/or use of equipment given by the Lab Assistant on duty. Lab Assistants may direct students to leave the lab if they do not observe these regulations. Users are also required to obey all DSU signs posted in the lab.
Personal Responsibility
· Users must provide the lab assistant with their DSU identification card before being assigned a computer. Users without a DSU identification card will not be allowed to use the lab. Upon departure, retrieve ID from the lab assistant and sign out from the lab.
· Time limits of two hours are enforced when students are waiting.
· Bring a USB Jump Drive with you to the lab to save work. Do not save to the computer's hard drive.
· Classes may request to have some equipment reserved for them. Users may be required to leave for the duration of the scheduled event.
· Users should back up data frequently to prevent loss of work. Remember that a power failure or flawed removable media device could be disastrous.
· Do not turn off the machine when finished. The computers stay on all day. Please exit the application you were working on and return to the Windows Main Screen before removing your data storage device.
· DSU has implemented a pay for print system. Please help us to keep our printing cost down by printing only necessary pages. The lab assistant must release all print jobs to the printer. Make sure to press print on your computer before going to the lab assistant to have him/her release your print job. Pages can be saved to removable media devices and printed in the convenience of your home or dorm room.
· Users will properly operate all hardware and not abuse it in any way. Users shall not disconnect or connect peripherals, devices, power cables or network cables to or from lab machines. Users shall not tamper with nor attempt to repair any equipment.
· The telephone is to be used for incoming calls or for calling for assistance in the laboratory. It is not for personal usage. Long distance calls are not accessible with this extension.
· Users will notify the Lab Assistant on duty of any malfunctioning equipment.
· See a lab assistant concerning any problems or questions. The lab assistant on duty sits behind the Help Desk in the lab.
· If a lab assistant is not present, please call the OIT help desk (x4444) for assistance.
· Note: Violations of these regulations constitute cause for the revocation of user privileges and could result in formal disciplinary action by the University and/or criminal prosecution.
Violations
Violations of these policies may result in the immediate suspension of computer account and network access pending investigation of circumstances and may lead to their eventual revocation. Serious violations of the policy will be referred directly to the appropriate University or outside authorities; unauthorized use of University computing facilities can be a criminal offense. The penalties may be as severe as suspension or dismissal from the University and/or criminal prosecution.
Violators of this policy will be dealt with according to the details outlined in the University’s Responsible Use of Electronic Communications policy. Those who cannot accept these standards of behavior will be denied use of Delta State computers or network systems. Violators may also be subject to penalties under University regulations and under state and federal laws
- Copyright Infringement
-
The use of computers or network systemsin no way exempts any member of the University community from the normal requirements of ethical or legal behavior in the Delta State community. In particular, data, software, and computer capacity have value and must be treated accordingly. Each member of the community is responsible for his/her actions whether or not rules are built in, and whether or not they can be circumvented. Individuals using the campus computer systems for any purpose, including email communications, are subject to the rules imposed by the University to protect the University resources, including individuals and equipment, and the rules imposed by any governing body.
Copying, downloading, storing, displaying, or distributing copyrighted material using University systems or networks without the express permission of the copyright owner, except as otherwise allowed under the copyright law, is prohibited. Under the Federal Digital Millennium Copyright Act of 1998, repeat infringements of copyright by a user can result in termination of the user's access to University systems and networks, and further prosecution as is warranted by state and Federal Laws and the Federal Digital Millennium Copyright Act of 1998.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
Copyright Infringement: Copying, storing, displaying, or distributing copyrighted material using University systems or networks without the express permission of the copyright owner, except as otherwise allowed under the copyright law, is prohibited. Under the Federal Digital Millennium Copyright Act of 1998, repeat infringements of copyright by a user can result in termination of the user's access to University systems and networks, and further prosecution as is warranted by state and Federal Laws and the Federal Digital Millennium Copyright Act of 1998.
PROCEDURES and RESPONSIBILITIES
The distribution of copyrighted materials over the Internet for which the distributor (any server — including your computer) does not have permission can be violation of federal criminal law, a law called the Digital Millennium Copyright Act of 1998 (“DMCA”). Most of the music, games or videos downloaded through file-sharing programs lack permission of the copyright owner. Moreover, those very programs that enable an individual or that an individual uses to download programs automatically open file-sharing services from the computer. Thus, without knowing it explicitly, by downloading the program and the files, the computer is programmed to share it back out into the international Internet community. The user is then therefore liable to be in violation of the DMCA, even if a single song was downloaded. Each criminal offense carries with it a minimum fine of $30,000 and a potential jail sentence.
Delta State University receives notices of copyright infringement under the DMCA. These notices come from software or entertainment industries that focus their Internet scans on university or college networks for specific games, songs or videos. They focus on colleges and universities because the DMCA makes Internet service providers liable for contributory copyright violations if they do not remove infringing material when they have notice of it and because college campuses are hotbeds of file sharing activity.
To alleviate its potential liability, Delta State University must respond to these notices expeditiously. The individual usually finds out about it when they receive a standard notice form from the university’s designated DMCA agent informing them that a copyright holder has sent the university a notice of infringement identifying their DHCP address. The individual is requested to confirm a cease and desist action to the copyright agent.
If the individual ignores the request, then the DMCA agent instructs the network operations center to block their IP address, which effectively blocks their Internet connection.
Ways to prevent breaking copyright laws:
· Do not download copyrighted material for which you do not have the owner’s permission.
· If you have file-sharing programs on your computer, set the program such that it no longer serves materials out from your computer.
· Turn off File and Print Sharing on your computer. Network operators with responsibilities to maintain a safe and functional network will check and regulate for excessive volumes (they do not monitor content), and there are protocols for excessive use as well.
Violations of these policies may result in the immediate suspension of computer account and network access pending investigation of circumstances and may lead to their eventual revocation. Serious violations of the policy will be referred directly to the appropriate University or outside authorities. Unauthorized use of University computing facilities can be a criminal offense. The penalties may be as severe as suspension or dismissal from the University and/or criminal prosecution.
Violators of this policy will be dealt with according to the details outlined in the University’s Responsible Use of Electronic Communications policy. Those who cannot accept these standards of behavior will be denied use of Delta State computers or network systems. Violators may also be subject to penalties under University regulations and under state and federal laws.
- Digging Permits
-
Permission must be obtained from the Chief Information Officer prior to any digging, boring, planting or removal of shrubbery, etc., on Delta State property.
Boring: The use of specialized equipment to excavate, either horizontally or vertically, on or beneath ground level.
Excavation: Any movement or relocation of ground, or ground cover (includes concrete, gravel, etc.).
PROCEDURES and RESPONSIBILITIES
This policy is intended to emphasize the importance of protecting University infrastructure by obtaining permission prior to any excavation on Delta State property.
Prior to any digging, boring, planting or removal of shrubbery, etc. on Delta State University property, all contractors, university employees, students, and others must complete a digging permit, and receive signed approval. The permit must state the exact location and date for the planned excavation.
The Delta State Physical Plant and Telecommunications Departments will mark all utilities in the area, and provide any necessary special instructions or coordination requirements. Both departments must be contacted on the date excavation is to begin. When permits are issued for an extended period, or for multiple locations, both departments must be contacted for each new location.
When telephone or fiber-optic cables or facilities are located in an area to be excavated, Telecommunications Technicians must be on site during the digging operation. Damage to Telecommunications or Physical Plant facilities, as a result of failure to contact these departments, will result in the cost of repairs being charged to the appropriate company, department or individual.
- Digital and Electronic Copyright Infringement
-
Copying, downloading, storing, displaying, or distributing copyrighted material using University systems or networks without the express permission of the copyright owner, except as otherwise allowed under the copyright law, is prohibited. Under the Federal Digital Millennium Copyright Act of 1998, repeat infringements of copyright by a user can result in termination of the user's access to University systems and networks, and further prosecution as is warranted by state and Federal Laws and the Federal Digital Millennium Copyright Act of 1998.
The Higher Education Opportunity Act (34 C.F.R. Section 668) by the United States Congress and signed into law by on August 14, 2008, requires the educational institutions be proactive in the prevention of illegal downloading and copyright infringement. The following is Delta State University’s policy regarding illegal peer-to-peer file sharing.
It is the policy of DSU that any illegal peer-to-peer file sharing over the University's network is prohibited. All users who access the Delta State University network acknowledge that they are aware of and agree to this and all University policies.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Copyright law: The Copyright Law of the United States of America is contained in Title 17 of the United States Code (U.S.C) and is available at http://lcweb.loc.gov/copyright/title17/ protects “original works of authorship fixed in a tangible medium of expression” for a limited period (17 U.S.C. §102). Copyright protection includes, for instance, the legally secured right to publish and sell the substance and form of a literary, artistic or musical work. The federal copyright statute governs the reproduction of works of authorship. In general, works governed by copyright law include such traditional works of authorship as books, photographs, music, drama, video and sculpture, and also software, multimedia, and databases. Copyrighted works are protected regardless of the medium in which they are created or reproduced; thus, copyright extends to digital works and works transformed into a digital format.
Copyright Infringement: Copying, storing, displaying, or distributing copyrighted material using University systems or networks without the express permission of the copyright owner, except as otherwise allowed under the copyright law, is prohibited. Under the Federal Digital Millennium Copyright Act of 1998, repeat infringements of copyright by a user can result in termination of the user's access to University systems and networks, and further prosecution as is warranted by state and Federal Laws and the Federal Digital Millennium Copyright Act of 1998.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Illegal Downloads: to transfer files or data from one computer to another without the permission of the copyright owner
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
Peer to Peer File Sharing: allows internet users to transfer digital files directly from computer to computer
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
The distribution of copyrighted materials over the Internet for which the distributor does not have permission is a violation of the Digital Millennium Copyright Act of 1998 (“DMCA”). Most of the music, games or videos downloaded through file-sharing programs lack permission of the copyright owner.
Delta State University receives notices of copyright infringement under the DMCA. These notices come from software or entertainment industries that focus their Internet scans for specific games, songs or videos. To alleviate its potential liability, Delta State University must respond to these notices expeditiously and will take the following steps:
- Upon receipt of notification, the Office of Information Technology must identify the source of the complaint.
- DSU is requested to confirm a cease and desist action to the copyright agent.
- The IP address from which the complaint originated will be disabled.
- The CIO, and the Director of Housing or the respective department head will meet with the party to explain the complaint and advise on how to remove the copyrighted material from their machine.
- Once the information has been removed, OIT will be authorized to re-enable the IP address.
- If the individual ignores the request, access will not be restored until proof can be furnished that the copyrighted material no longer exists on the individual’s computer or associated devices.
- On second violation, the party risks having their Internet access permanently disabled.
- Appeals: Individuals may appeal findings or rulings to the Director of Housing or the respective department head. Appeals may then move to the Vice President for the respective area.
Legal Alternatives for Downloading
The following legal alternatives for downloading materials from the Internet are available. Delta State University does not endorse any specific commercial product and endorses the sites below only that they provide legal alternatives for downloading music, movies, books.
Federal and State Penalties
- Federal Law provides severe civil and criminal penalties for the unauthorized reproduction, distribution, rental or digital transmission of copyrighted sound recordings (Title 17, United States Code, Sections 501 and 506). Code available at http://lcweb.loc.gov/copyright/title17/ Criminal penalties for first-time offenders can be as high as five years in prison and $250,000 in fines.
- Civil penalties can run into many thousands of dollars in damages and legal fees. The minimum penalty is $750 per item (song, video, etc).
- The “No Electronic Theft Law” (NET Act) is similar on copyright violations that involve digital recordings. Congress enacted the No Electronic Theft (NET) Act in 1997 to facilitate prosecution of copyright violation on the Internet. The NET Act makes it a federal crime to reproduce, distribute, or share copies of electronic copyrighted works such as songs, movies, games, or software programs, even if the person copying or distributing the material acts without commercial purpose and/or receives no private financial gain. Prior to this law being passed, people who intentionally distributed copied software over the Internet did not face criminal penalties if they did not profit from their actions. Electronic copyright infringement carries a maximum penalty of three years in prison and a $250,000 fine.
Mississippi Code:
The Mississippi Code http://www.sos.state.ms.us/ed_pubs/MSCode/
Violations:
Violations of these policies may result in the immediate suspension of computer account and network access pending investigation of circumstances and may lead to their eventual revocation. Serious violations of the policy will be referred directly to the appropriate University or outside authorities. Unauthorized use of University computing facilities can be a criminal offense. The penalties may be as severe as suspension or dismissal from the University and/or criminal prosecution.
Violators of this policy will be dealt with according to the details outlined in the University’s Appropriate Use of Computing and Network Resources policy. Those who cannot accept these standards of behavior will be denied use of Delta State computers or network systems. Violators may also be subject to penalties under University regulations and under state and federal laws.
- Educomm Code
-
The University community has the right to expect that the information they create and store on University systems is safe and secure from others. The University may restrict the use of its computers and network systems in order to provide this security. Persons violating this policy may be subject to termination of their rights to access University computing resources, and possibly subject to further sanction by the University.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, wireless devices, routers and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
PROCEDURES and RESPONSIBILITIES
Respect for intellectual labor and creativity is vital to academic discourse and enterprise. This principle applies to works of all authors and publishers in all media. It encompasses respect for the right to acknowledgment, the right to privacy, and the right to determine the form, manner, and terms of publication and distribution.
Because electronic information is volatile and easily reproduced, respect for the work and personal expression of others is especially critical in computer environments. Violations of authorial integrity, including plagiarism, invasion of privacy, unauthorized access, and trade secrets and copyright violations, may be grounds for sanctions against members of the academic community.
- Electronic Mail - Students
-
Electronic mail (e-mail) is an official means for communication within Delta State University. Therefore, the University has the right to send communications to students via e-mail and the right to expect that those communications will be received and read in a timely fashion. OKRAmail is considered the official means for communication between administration and students.
None
PROCEDURES and RESPONSIBILITIES
Assignment of Student E-mail Addresses
The Office of Information Technology (OIT) will assign all students an official university e-mail address upon indication from the registrar’s office that the student is enrolled or enrolling in classes (at the first time of registration). It is to this official address that the University will send e-mail communications. This official address will be the only e-mail address tracked.
Redirecting E-mail
Students may have e-mail electronically redirected to another e-mail address. If a student wishes to have e-mail redirected from his or her official address to another e-mail address (e.g., @aol.com, @hotmail.com), they may do so, but at his or her own risk. The University will not be responsible for the handling of e-mail by outside vendors. Having e-mail redirected does not absolve a student from the responsibilities associated with communication sent to his or her official e-mail address.
Expectations Regarding Student Use of E-mail
Students are expected to check their official e-mail address on a frequent and consistent basis in order to stay current with University communications. The University recommends checking e-mail once a week at a minimum in recognition that certain communications may be time-sensitive.
Academic Uses of E-mail
Faculty may determine how e-mail will be used in their classes. It is highly recommended that if faculty members have e-mail requirements and expectations they specify these requirements in their course syllabus. Faculty may expect that students' official e-mail addresses are being accessed and faculty may use e-mail for their courses accordingly.
Appropriate Use of Student E-mail
In general, e-mail is not appropriate for transmitting sensitive or confidential information unless its use for such purposes is matched by an appropriate level of security. Confidentiality regarding student records is protected under the Family Educational Rights and Privacy Act of 1974 (FERPA). All use of e-mail, including use for sensitive or confidential information, must be consistent with FERPA. E-mail shall not be the sole method for notification of any legal action.
-
Technology Governance Committee Minutes: March 1, 2006 (revisions approved via e-mail April 12, 2006)
-
Approved by the President’s Cabinet: September 11, 2006
-
Implementation Date: January 8, 2007
- Electronic Mail Quotas - Faculty/Staff
-
This policy establishes the standard for email retention and storage for faculty and staff for the University. University storage resources are not unlimited and must be managed to ensure adequate space is available for all resources.
The University E-mail system is a communication system and is not a storage or archival system. Messages in the system are of a temporary nature and the University does not perform any archival of these messages. It is the individual's responsibility to archive any messages that he/she wishes to permanently maintain by printing, exporting or archiving.
Storage Space: The disk space available to store official University communications and resources
Exchange: Microsoft email system used for faculty/staff communications
Active Directory: The directory structure used on Microsoft Windows based servers and computers to store information and data about network and domains and manage University connections to resources.
OIT – Office of Information Technology
PROCEDURES and RESPONSIBILITIES
University storage resources are not unlimited and must be managed to ensure adequate space is available for new resources. Therefore user mailboxes on the University email servers should not exceed the following quota limits:
1.5 GB for faculty and staff accounts on faculty/staff mail server
This limitation applies to all mail in a user’s account, including messages in all folders and subfolders, not just the primary mailbox folder. Moving mail into subfolders within the mailbox will not protect them from removal.
Faculty/Staff Mailboxes
Faculty and staff will receive notification messages from the mail administrator alerting them when they are approaching the allocated quota. Messages will be received in the email box when the mailbox reaches the following size:
1st Notification – 90% of Quota Allocation (1.35 GB), you will receive a message that your mailbox is almost full please reduce your mailbox size.
2nd Notification – 100% of Quota Allocation (1.5 GB), you will no longer be able to send email messages until you reduce the size of your email storage.
3rd Notification – 110% of Quota Allocation (1.65 GB), you will no longer be able to send or receive email messages.
Faculty and staff may archive mail in excess of the allocated quota to their local machine or to an external storage device. Assistance with archiving of mailboxes will be provided by OIT on request and is available on the OIT website.
Faculty/Staff Archiving Process
Archiving Items
The Microsoft Exchange archive feature saves mail or phone messages, appointments, reminder notes, and tasks to a designated database on a local drive. Archiving items saves network space and keeps your mailbox uncluttered. It also protects items from being automatically deleted. You can view archived items whenever you need by selecting the Archive Folder from your mailbox.
Archive Settings
Archiving is enabled by default for faculty and staff email accounts. E-mail items 45 days or older are automatically archived to the C: drive. Faculty and staff can change the default archive settings; however the University does not recommend changing the default archive limit to more than 180 days. Faculty and staff may also manually archive an item or unarchive an item at any time.
Junk Mail and Trash Folders
Items in the Junk Mail folder are automatically moved to the Trash folder after 30 days. Many items are automatically moved to the Junk Mail folder by Exchange after being marked [SPAM] by the Cisco Ironport Spam appliance. While the Ironport is mostly accurate in its assessment of spam mail, some messages that are not spam may get sent to your Junk Mail folder. You should review the items in that folder periodically to find messages you might want to keep. Move those messages to another mailbox folder to avoid losing them.
Policy on Critical E-mail and E-mail Recovery
Backup of individual email accounts is the responsibility of the mailbox owner. While critical system backups are maintained, accounts cannot be fully restored if it is deleted or mail messages within the mailbox are permanently deleted. Maintaining archive folders of individual mailboxes is the responsibility of the mailbox owner. If you work with e-mail critical to the Institution's function (e.g., financial records, legal documents), we recommend that you save that e-mail as a file or print that e-mail to hard copy.
Microsoft Exchange Backups
All Microsoft Exchange e-mail servers are backed up on a daily basis and saved for three days. The backups are for disaster recovery purposes only, i.e., total loss of the server. The backups will not be used for the recovery of lost e-mail. Retaining e-mail is left to the individual user, who may archive, print, or save e-mail items.
Non-Compliance
In the event systems resources are in jeopardy and the mailbox owner has disregarded quota notifications as distributed by OIT, the University reserves the right to purge electronic mail accordingly:
Inbox: purge messages > 6 months old
Trash/Deleted Mail: purge messages > 14 days old
Junk Mail: purge all messages
If individual mailbox owners choose not to manage their mailboxes within the quota system and either dispose of messages or archive those messages, the messages may be automatically purged to protect the integrity and availability of University mail systems.
- Information Technology Governance Committee
-
The purpose of this policy is to establish a uniform and integrated structure for considering information technology matters in order to: (1) advise the President and the Cabinet in making executive-level strategic management decisions involving information technologies, (2) set directions and priorities for information technology and related resource allocations in a timely manner, (3) develop policies and procedures that will be implemented by the Office of Information Technology and (4) establish a mechanism for overseeing the implementation of strategic and tactical technology plans.
None
PROCEDURES and RESPONSIBILITIES
Effective governance structures tend to share a common set of goals and principles. Taken together and adapted to a particular university or university’s environment, these goals and principles form the framework for defining how information technology policies, resources and architectures are established, deployed, managed, and enforced. Governance structures are thus most successful when they are charged with:
- Establishing a shared vision of how information technology can add value to the institution;
- Establishing information technology goals, and the strategies for achieving those goals;
- Establishing principles and guidelines for making information technology decisions and managing initiatives;
- Overseeing the management of institutional information technology initiatives;
- Providing a vehicle through which members of the end user community participate in information technology planning and decision-making;
- Establishing and communicating institutional information technology priorities;
- Determining information technology priorities in resource allocation;
- Establishing, amending and retiring, as necessary, institutional information technology and other technology related policies, and
- Determining the distribution of responsibility between the Office of Information Services and end users.
The Information Technology Governance Structure for Delta State University will be organized with those fundamental goals and principles in mind.
- Statement of Purpose
The purpose of this policy is to establish a uniform and integrated structure for considering information technology matters in order to: (1) advise the President and the Cabinet in making executive-level strategic management decisions involving information technologies, (2) set directions and priorities for information technology and related resource allocations in a timely manner, (3) develop policies and procedures that will be implemented by the Office of Information Technology and (4) establish a mechanism for overseeing the implementation of strategic and tactical technology plans.
- Governance Structure
The organizational structure depicted below provides for a flow of information, collaboration, and decisions that is integrated and supports both operational level activities and executive level needs. It also provides for overseeing the implementation of the Information Technology Strategic Plan (ITSP) by providing for collaboration on tactical and project plans while viewing the ITSP as a “living document” that will require adjustment from time to time. This structure is also designed to enable multi-year planning and resource allocation to fund strategic and tactical initiatives.
Although not a formal part of the decision-making components of the governance structure, the diagram depicts an Information Technology Forum. The forum will serve as a quarterly opportunity for any community members to meet with OIT personnel to express views, receive updates, and discuss any matters. It provides an important supporting role to the whole governance process.
Envision an imaginary dotted line appearing vertically down the middle of the diagram to help illustrate the integrated but distinct roles of the structure’s major components and how they converge at the executive level of College leadership and administration. To the left are the components that bear major responsibilities for strategies, policies, and priorities. To the right are those that focus on management, implementation, and leadership. The two components of the governance structure work in close collaboration at all levels and on all matters. The ultimate outcome of this integrated approach is to provide the executive leadership of the College with the best possible combination of advice and counsel on information technology as a major success factor in achieving DSU’s mission.
- Charge to the Information Technology Governance Committee (ITGC)
The charge to the ITGC is to advise the President and Cabinet in setting priorities and determining the direction for information technologies in the advancement of the University’s institutional goals. The committee will assist in setting long-range strategic priorities, overseeing related policies, and supporting the use of information technology within the College. The committee has executive-level oversight of the implementation of the Information Technology Strategic Plan and its associated tactical plans.
The ITGC reports to the President via the Contract Administrator and the Cabinet. The Chair of the Committee bears responsibility for bringing all ITGC recommendations, reports, etc. to the Contract Administrator, who will relay the necessary information to the Cabinet and the President. Reporting to the ITGC are four standing committees: Staff Technology Committee (Banner Users group), Academic Technology Committee, Web Oversight Committee, Student Technology Services Committee, and other subcommittees as appointed by ITGC. The Office of Information Technology participates ex officio on all committees and coordinates implementation of ITGC and standing committee decisions. The CIO provides advice and counsel to the Contract Administrator on technology matters on an ongoing basis.
The ITGC meets bi-monthly on a regularly scheduled basis and at other times as deemed necessary by the committee’s Chair or the President.
- The Responsibilities of the ITGC
7.1 Review and recommend to the Cabinet an Information Technology Strategic Plan, coordinated with the University’s strategic planning process;
7.2 Review and approve annual tactical plans, work plans, and time-frames developed by the CIO to guide implementation of the Strategic Plan;
7.3 Make recommendations to the Cabinet the allocation of University financial resources to enable approved plans and their associated budgets;
7.4 Review and recommend to the Cabinet appropriate administrative policies and procedures recommended by the ITGC and its subcommittees;
7.5 Resolve information technology issues referred to the Committee by its Subcommittees, and make recommendations for resolution on such matters to the Cabinet, as appropriate;
7.6 Set priorities for information technology endeavors and recommend such to the Cabinet for approval;
7.7 Ensure an annual evaluation of the institution’s effectiveness in implementing its strategic plan for information technology; and
7.8 Provide guidance to the Office of Information Technology on the implementation of ITGC decisions.
- Membership on the ITGC
The units cited below are recommended to represent their areas on the ITGC on a permanent and ongoing basis. The representatives from the areas listed will be designated by their appropriate vice president and will be reviewed annually by the Cabinet. “Designees” and “substitutes” are not permitted because the business of the committee is intimate to the responsibilities of the position named. Members should not be “technical” in nature.
Academic areas to include:
· Academics Affairs
· College of Arts and Sciences – two representatives
· College of Business
· College of Education
· School of Nursing
· Library
Administrative areas to include:
· Alumni/Foundation
· Athletics
· Division of Finance
· Division of Student Affairs
Ex Officio - Chief Information Officer
- Charge to the Subcommittees
The charges to each of the Subcommittees are appropriate for their respective functional areas of concern. The ITGC shall appoint the Chairperson of each Subcommittee. Each Subcommittee will perform the bulk of the analysis within their entire functional areas they represent, that is all of the administrative or educational departments and services, for example, and present their recommendations to the ITGC for action. The subcommittees serve as operational level forums for review and discussion of ongoing technology related matters in collaboration with OIT personnel. They work with OIT on the development of tactical and implementation plans for the IT Strategic Plan. They also serve as primary communication vehicles with their constituencies in the DSU community on technology related matters.
The Subcommittees meet monthly on a regularly scheduled basis and at other times as deemed necessary by the chair, or by the chair of the ITGC.
- The Responsibilities of the Subcommittees
7.1 Identify information technology related issues and recommend solutions to them for ITGC’s consideration (high level, not “technical”);
7.2 Consider and recommend policies proposed for ITGC’s consideration;
7.3 Analyze needs and identify incomplete services;
7.4 Recommend priorities for information technology endeavors;
7.5 Collaborate with OIT on the development of multi-year university-wide plans for information technology services linked to the IT Strategic Plan;
7.6 Communicate to its constituencies on subcommittee activities;
7.7 Serve as the primary consultative interface between OIT and its constituent community;
7.8 Carry out an annual evaluation of its effectiveness in advancing the IT Strategic Plan, and
7.9 Provide feedback on OIT performance on an annual basis.
- Membership on the Subcommittees
Subcommittees are determined by the Contract Administrator, upon recommendation by the ITGC and CIO. The chairs of the subcommittees are appointed by the ITGC. In all cases terms are annual. Current subcommittees include the Staff Technology Committee (Banner Users group), Academic Technology Committee, Web Oversight Committee, and Student Technology Services Committee. Others may be assigned as necessary.
- Ad Hoc and Local Committees
At appropriate times, it may be necessary for the ITGC or its subcommittees to establish ad hoc committees for specific issues or projects. Ad hoc committees will be given specific, written charges and will be convened for a specified period of time. When their assignment is completed they are disbanded. It is important that the role, responsibilities, and time frames for these groups are clearly stated and that their work be carefully monitored to ensure they work within the scope intended. The existence of this governance structure does not preclude departments, schools, or campuses from establishing their own technology committees for internal benefit. Such committees, while of potential benefit to local operations, are not a part of the university’s IT governance structure.
- Enabling Policies and Procedures
Each of the committees in the governance structure sets its own operational level procedures and guidelines consistent with the policies and procedures contained herein. These will include the method by which constituencies will be informed of committee activities, decisions, and recommendations. The operational guidelines for the subcommittees are subject to review and approval by the ITGC. The operational guidelines for the ITGC are subject to review and approval by the Cabinet.
- Communication to the Community
The strategic, tactical, and implementation plans created and modified by the governance structure will be posted on DSU’s Office of Information Technology web site for community access.
- Modifications to the Governance Structure
Refinements to this governance structure and its policies, committee membership, and the like may be made from time to time by the President and Cabinet. Fundamental changes to this structure and the governance process will be made through a consultative process determined by the President and Cabinet.
· Approved by the President’s Cabinet – August 24, 2005
- Information Technology Maintenance
-
The Office of Information Technology (OIT) conducts regular scheduled network/systems maintenance on the third Friday of each month from 3:00 p.m. to 6:00 p.m. This schedule allows for Information Technology (IT) maintenance work to be performed and expected by the campus. Communication to the campus goes out the Wednesday prior indicating what systems will be affected by that month’s maintenance window. The maintenance window may be adjusted due to such events as registration, graduation, or other large events requiring IT resources.
System reboot: Reload the operating system and restart the computer system
Hardware/software upgrades: Replace existing hardware/software with a newer version
Patch installation: Install an executable module
PROCEDURES and RESPONSIBILITIES
The Maintenance Schedule
The monthly time for IT maintenance is scheduled from 3:00 p.m. to 6:00 p.m. on the third Friday of each month since IT utilization decreases dramatically on Friday afternoons. Even though the maintenance period calls for three hours, interruptions to customers are typically brief. Customers are notified, via e-mail, of system down time on the Wednesday prior to the maintenance procedure. A single monthly maintenance period will eliminate confusion for customers, minimize the number of service disruptions, and provide coordination for the OIT infrastructure groups.
Suitable Vendor Support
Quality support available from vendors occurs during regular business hours and availability of experienced engineers is significantly better during the day. Since risks and the resulting need for support is highest during maintenance procedures (e.g. system reboots, patch installation and software upgrades), maintenance will be scheduled during daytime hours to minimize downtime. A Friday afternoon maintenance window allows for vendor support at the normal pay rate and provides the weekend to recover from any disastrous failures that may occur during maintenance.
Minimize Service Interruption to Customers
Maintenance on each individual server may last from five to twenty minutes, on average. The maintenance schedules allows for three hours due to the total number of servers being maintained. The level of redundancy inherent in the current infrastructure allows support personnel to perform maintenance on one or more servers while other servers continue to provide services to customers.
Avoid Schedule Conflicts with Database and System Backups
All system and database backups run during the evening and early morning hours. This includes the Banner systems. The logical time to avoid schedule conflicts with backups is to complete maintenance prior to running the backup.
-
Technology Governance Committee Minutes: March 1, 2006 (revisions approved via e-mail April 12, 2006)
-
Approved by the President’s Cabinet: September 11, 2006
- Management of Personal Computers
-
The Office of Information Technology and Delta State University is not responsible for the acquisition of personal computers, hardware, software, and management of personal computer systems.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
PROCEDURES and RESPONSIBILITIES
Some organizations today do not consider PCs as capital assets, while other organizations lease this hardware. Leasing reduces the capital asset accounting activity. But because PCs are so inexpensive and accessible, proprietorship rights are not controlled. In actuality this equipment will cost more, produce less, and jeopardize the organization’s operation and security if not properly organized and controlled. The OIT organization is the most qualified for this function.
The OIT sets the standards for PC hardware acquisitions. These cover:
- The lease, purchase, or rental of PC equipment
- The brand of computers acquired
- The brand of peripheral equipment acquired
- Maintenance contracts
The OIT controls site-licensed software whose charges are based on quantity. The user or department may be required to pay the cost of software on a prorated scale. Departments may purchase their own software if on the list of software that the information systems department supports. Contact the OIT for a listing of supported software or to request testing of newly acquired teaching software.
No personal hardware or software is allowed. All hardware and software of any kind, including in-house-developed programs, are the organization’s sole property. This policy is enforced to reduce problems with equipment, software failure, damage to data files, and the introduction of viruses. To restrict access to the organization’s data and/or programs and prevent virus transmission, disks or tapes belonging to the organization are not to be used in personal home computers.
The OIT should be involved in strategic planning for the University’s PC needs including hardware, software, maintenance, and support, and training for users of this technology.
The degree of involvement varies dependent on the operation requirements of each department. The IT Governance Committee, working with the Presidents' Cabinet, guides information systems management and settles disputes concerning the organization’s current and strategic needs.
- Mass Email for Communications Policy, Guidelines, and Procedures
-
Administrative and academic offices on campus often use mass email communications to send important information to various areas on the campus via unsolicited listserv dissemination. This policy provides the guidelines and procedures for mass email communications to all areas of the campus community.
University administrator/officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; a Dean, Director or similar position.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the University and for which the University is responsible. Throughout this policy, the shortened term "university systems" is used to mean all University computers and network systems.
The University operates five listservs, each targeted to different campus constituencies.
Membership on these lists is determined by departmental position and is assigned at the time of employment or position change. Individuals are not able to unsubscribe from these lists.
- Admininfo: Information for all administrative offices
- Members: Administrative Department Heads, Deans, Executive Offices
- Acadinfo: Information for all academic offices
- Members: Academic Department Heads, Deans, Executive Offices, Faculty, Adjunct Faculty
- StaffInfo: Information relevant to all staff
- Members: Administrative Department Heads, Deans, Executive Offices, Staff members
- Okramail-FYI: Information relevant to all students
- All students holding an Okramail email address
- DSU-FYI: Information relevant to media and all members of the DSU community
- All campus constituents, outside entities who contact University Relations and ask to be added to the distribution group
The appropriate University administrator/officer will determine whether an email should be distributed to any or all of the University Listservs. Multiple communication methods are recommended as the University cannot guaranty when or if individuals will read the email correspondence. Emergency communications, urgent communications, and critical information are handled directly by the Chief of Police or key executive offices.
The use of the Active Directory Global Address List to distribute mass email communications to the campus is prohibited. All mass email communications must follow the policies and guidelines set forth within this policy.
GUIDELINES
The content of mass email communications should fall within the appropriate topics and should not violate other policies of the University.
Appropriate Topics examples:
- Campus wide policy changes
- Campus wide events invitations, announcements and publication information
- Administrative information that is time-sensitive
- Deadline information for University processes/events
- Emergency Communications (via appropriate channels)
Inappropriate Topics examples:
- Any announcement that is not relevant to the University mission
- Club information or announcements
- Any commercial announcements or invitations
- Any solicitations
- Personal Messages
- Any messages that violate University Policies
Message Posters
Only authorized individuals may post information to the respective listservs. Posting agents are determined by position at the University and relevance to the listserv. Additional requests to post to listservs should be submitted directly to the Director of Human Resources.
Email Message Requirements
1. Email Subject: The Subject line must be descriptive.
2. Email Body:
- The name, email address, and phone number of a person to contact should be contained in the message
- Attachments are discouraged
- Messages should not exceed 500K
- Messages should be brief and to the point and contain instructions on how to obtain additional information
- Any hyperlinks should include the fully qualified (include the http:// part) protocol to assure that most recipients will see the "active" links in your message.
- The message must be approved by the department head of the individual sending the request and should be proofread for spelling, grammatical and content errors prior to distribution
PROCEDURES
Mass email communication authorized agents must be approved by the Director of Human Resources who will consider whether the request is appropriate in light of the criteria and guidelines noted above. Once authorized, individuals sending email communications understand that several hours may be required to electronically distribute mass email communications so that the mail systems may manage the load accordingly.
The ability to post to University listservs is a privilege. The University may restrict or remove an individual’s ability to post to listservs with or without notice if it is determined that the poster is in violation of this policy or the Faculty and Staff Appropriate Use Statement.
Questions about this policy may be directed to the Office of Human Resources.
- Network Devices
-
The Office of Information Technology (OIT) is charged with providing a stable and secure campus network to support the mission of the University and therefore has the authority and responsibility to specify technical requirements for devices connecting to it. This includes providing leadership in the management of shared network resources, such as setting security standards and disconnecting noncompliant network devices when they have the potential for interfering with the proper operation of the campus-wide network.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee reponsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
PROCEDURES and RESPONSIBILITIES
The OIT must maintain the integrity of the network in order to manage the quality of the service. Therefore “rogue” hubs, wireless APs, and switches will not be permitted.
All network devices (hubs, routers, switches, wireless access points, etc.) shall be managed by the Office of Information Technology (OIT) as property of Delta State University (DSU). Devices that are installed, other than those installed by OIT, will be shut down as these devices interfere with the communications infrastructure and may cause considerable harm to the University network systems.
Violations
- Violators of this policy will be dealt with according to the details outlined in the University’s Appropriate Use of Computing and Network Resources policy.
- Those who cannot accept these standards of behavior will be denied use of Delta State computers or network systems.
- Violators may also be subject to penalties under University regulations and under state and federal laws.
- Appropriate Use of Computing and Network Resources Policy
- Password Policy
-
This policy establishes a standard for creation of strong passwords and protection of those passwords within the Microsoft Active Directory/Exchange email system. This policy applies to all persons who have, or are responsible for, an account on any system accessed on the Delta State University network or computer systems.
Expiration: Date at which password for access to University systems is required to be changed meeting strong password standards.
Users are responsible for assisting in the protection of the network and computer systems they use. The integrity and secrecy of an individual's password is a key element of that responsibility. Each individual has the responsibility for creating and securing an acceptable password per this policy. Failure to conform to these restrictions may lead to the suspension of rights to University systems or other action as provided by University Policy, State or Federal law.
Password Creation Rules:
Passwords are initially assigned when a new account is created. Users have the right and the ability to change passwords on their Active Directory/Exchange accounts at any time.
o Passwords must be at least eight characters in length.
o Passwords must consist of a combination of upper case letters, lower case letters and numerals.
o Passwords cannot contain a dictionary word.
o Passwords cannot contain all or part of your user id.
o Passwords cannot match any of your four previous passwords.
Password Expiration:
Passwords will expire on a 180-day cycle. Advance warnings of upcoming password expiration will be sent to the designated account holder via campus e-mail beginning 30 days prior to expiration, with repeated reminders several times thereafter until the expiration date.
Any account holder may change his or her password at any time through their Active Directory Account or https://passwordreset.deltastate.edu online password reset utility - it is not necessary to wait for expiration.
Passwords should be changed immediately and the Office of Information Technology notified whenever there is a belief that the password has been compromised.
- Request for Technology
-
Requests for technology equipment must go through the Office of Information Technology. This includes computers, printers, data projectors, cameras, VCRs, and other devices and software. The OIT will review the request to determine if the request can be funded from central monies, whether the device may conflict with the rest of infrastructure should it be connected to the network, or if perhaps there is a better alternative for consideration.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
Used Equipment: That technology equipment that is no longer able to function as solid, working equipment for daily activities of the campus. This equipment should be used only as a temporary method for part time staff members. Under no circumstances shall used equipment be used as a substitution for new equipment. Used equipment will not be supported by OIT in the same manner as is new, university provided equipment.
PROCEDURES and RESPONSIBILITIES
The procedures outlined below are to be followed when a department/entity desires new technology equipment.
- The Chief Information Officer will distribute a “Technology Needs” form to each Cabinet Member and academic Dean in early Spring. Each of their departments/divisions is to complete one form for each project need (one department may complete several forms, if needed) and return their forms to their respective Dean/VP.
- Once the Dean/VP has received all of their departmental/divisional requests, the Dean/VP is to complete the top portion of the forms, which includes the name of their unit and the Dean/VP’s priority ranking for that project request. The IT Governance Committee will then review the requests based on an assessment of the needs and the budget. OIT should be consulted for determination of whether the request in question will work with University approved hardware and software, etc.
- Any equipment for new positions should be included in this process. (For example, equipment needs for new positions created for new instructors must be addressed at this time.)
- Requests for new equipment that are made after the above process has been completed
, must have their Vice President send a detailed letter of request, including the reason why the request was not submitted as part of the annual process, to the Chief Information Officer. The CIO will then consult with Executive Assistant to the President (EAP) for evaluation of the equipment described in the request. Once the equipment and hardware/software requests have been evaluated for completeness and compatibility with the University infrastructure, the EAP will submit the requests to the President’s Cabinet for consideration.
- Requests for replacement computers and/or printers must be accompanied by supporting documentation from OIT stating that the existing equipment is no longer viable.
- The equipment in question must be used in the course of daily work by a full-time University employee.
- Before submitting a request to the CIO, the department must first call OIT and have a technician come and evaluate the equipment in question. After evaluating the problem, OIT staff will make a recommendation to the CIO regarding the need for a replacement item.
- If the equipment is not repairable, the Director of OIT will then complete an equipment failure form and return it to the inquiring department.
- The department must then submit their request, accompanied by the supporting documentation received from OIT, to the Dean/VP for their signature.
- The completed request should then be forwarded to the CIO and EAP for evaluation.
- Equipment requested is to be used by part-time employees, student workers, or graduate assistants for University purposes only.
- Available equipment is estimated to be a minimum of three years old and will run limited applications.
- Recipient understands that the equipment will not be comparable to new equipment, and therefore should not have any software installed other than University site-licensed software, or other approved software applications.
- OIT will provide minimal support, up to and including the loading of University approved software as appropriate for the machine.
- OIT will not make major repairs or replace parts on any ‘surplus equipment’.
- Recipients must use the equipment for the purpose stated on the application.
- Should recipient no longer need the loaned equipment, the department must notify the Chief Information Officer to have the equipment picked up.
- The equipment must not be transferred to another department or removed from university inventory without prior written consent from the Chief Information Officer.
- A separate form should be completed for each item requested.
- The Chief Information Officer will consider applications as they are received. Recipients will be notified within fourteen days, of receipt of the application, as to whether or not the request for equipment is approved.
- Expenses incurred to connect the equipment to the University infrastructure will be the sole responsibility of the requesting department (for example, Telecommunications must install a network drop for the computer to be able to access University resources, including the Internet.).
- Recipients must use the equipment for the purpose stated on the application.
- Any available equipment will be distributed based on an as needed basis.
- Under no circumstances
, should any equipment that has been removed from the DSU inventory be allowed to connect to the University infrastructure. This is a violation of state law and will result in sanctions by the University and possibly by the state.
- Unauthorized Access to Computer Systems and Network
-
Unauthorized attempts to gain privileged access or access to any account or system not belonging to you on any University system are not permitted. No University system or network may be used as a vehicle to gain unauthorized access to other systems.
College/Unit Policy Officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; an Associate Dean or similar position.
Education Records: Records specifically related to a student and maintained by an educational institution or a party acting on its behalf. The Family Educational Rights and Privacy Act of 1974 protect these records.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
PROCEDURES and RESPONSIBILITIES
Any user who finds a possible security lapse on any University system must report it to the system administrators. To protect your files and the system, don't attempt to use a system under these conditions until the system administrator has investigated the problem.
User files on central University systems are kept as private as possible. Attempts to read another person's protected files will be treated with the utmost seriousness. The systems administrators will not override file protections unless necessary in the course of their duties, and will treat the contents of those files as private information at all times.
Violators of this policy will be dealt with according to the details outlined in the University’s Responsible Use of Electronic Communications policy (See Responsible Use of Electronic Communications Policy).
Those who cannot accept these standards of behavior will be denied use of Delta State computers or network systems. Violators may also be subject to penalties under University regulations and under state and federal laws.
- University Supported Hardware and Software
-
Due to the limitation of resources available at the University level, the campus cannot support all makes and models of equipment and software/hardware available on the open market. Items purchased that are not on the list below will be considered “non-supported” technology equipment and the University will not be required to provide technology support for such equipment and software.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
Market-specific disciplines: Disciplines that have special hardware/software needs due to the job market for which they are producing graduates.
Network Systems: Includes voice, video and data networks, switches, routers, wireless devices, and storage devices.
System or Network Administrator: A university employee responsible for managing the operation or operating system environments of computers or network systems, respectively.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
Used Equipment: Technology equipment that is no longer able to function as solid, working equipment for daily activities of the campus. This equipment should be used only as a temporary method for part time staff members. Under no circumstances shall used equipment be used as a substitution for new equipment. Used equipment will not be supported by OIT in the same manner as is new, university provided equipment.
PROCEDURES and RESPONSIBILITIES
The information outlined below details the hardware and software solutions that have been selected by the University. Departments interested in purchasing new hardware or software should consider this listing a guideline as to the brand and types of hardware and software the University has determined can and will be supported by the University resources. Due to the limitation of resources available at the University level, the campus cannot support all makes and models of equipment and software/hardware available on the open market. Items purchased that are not on the list below will be considered “non-supported” technology equipment and the University will not be required to provide technology support for such equipment and software.
- University Supported Hardware
a. Standard Hardware: The University will provide support for these items in the following ways: delivery, installation, maintenance, and service. See website for current list.
b. Non Standard Hardware: The University will provide assistance with these items. See website for current list.
- University Supported Software
a. University Site License Software: This software is provided on the base system of computers purchased for the University and is the preferred software for technology resources on the DSU campus. See website for current list.
b. Technical and Functional Support: The University will support these items in the following ways: installing the software (where appropriate), providing training on the use of the software (where appropriate), answering questions, and providing solutions to problems that occur with the software. See website for current list.
- Department/Discipline Specific Software
a. Technical Support: University support will be limited to the installation of the software. Departments/divisions will be responsible for providing training on the use of the software, answering questions, and providing solutions to problems.
- Usage of Social Security Numbers
-
The purpose of this policy is to promote an understanding of the procedure to ensure the privacy and proper handling of social security numbers and other personal information of students, prospective students, faculty, staff, alumni, and other persons officially associated with Delta State University.
In the normal practice of conducting university business, DSU collects and maintains confidential information related to its students, employees, alumni, and other individuals associated with DSU. Delta State University (DSU) is committed to protecting personal information and to deterring identity theft.
University administrator/officer: A person with responsibility for issues having broad-based policy implications for students, faculty, and staff in the college/unit; a Dean, Director or similar position.
Electronic Communications: The use of computers and network systems in the communicating or posting of information or material by way of electronic mail, bulletin boards, or other such electronic tools.
University Computers and Network Systems (University Systems): Computers, networks, servers, and other similar devices that are administered by the university and for which the university is responsible. Throughout this policy, the shortened term "university systems" is used to mean all university computers and network systems.
SSN – Social Security Number
The collecting of social security numbers (SSNs) is required of all employees of the university, all tuition-paying students, students receiving financial aid, and other individuals for which state and federal law require the reporting of SSNs. If there is no legal requirement to collect a SSN from a particular individual, DSU will not require such an individual to provide their SSN and will not deny any service as a consequence. DSU will not disclose the social security number of any individual to anyone outside the Mississippi Institutions of Higher Learning (IHL) system except as allowed by law or with permission from the individual or as approved by DSU legal counsel.
- DSU Identifier: (900#) As of August 10, 2005, SSN’s are no longer used as the primary identifier of individuals associated with DSU. DSU issues a unique, nine-digit number (the DSU ID number) to every student, employee, alumnus, and other person within DSU computerized record systems.
- Collection of SSN. DSU will continue to collect SSNs as permitted by law for official use within the Mississippi IHL system. Social security numbers will be released to entities outside the Mississippi IHL system only: (1) as allowed by law; or (2) when permission is granted by the individual; or (3) when DSU’s legal counsel has approved the release. As permitted by law, DSU can release SSNs to an external entity when it is acting as DSU’s contractor or agent and has proper safeguards in place to prevent unauthorized release or discovery by third parties.
- Delta State will no longer use the SSN as an alternate means of identification for ID lookups.
- Oversight of Usage of SSN. The Information Technology Governance Committee in collaboration with the Director of Human Resources will name the social security officer and will oversee the security of the data within the DSU computer systems and will make day-to-day decisions to implement SSN usage policies. Policy changes and interpretation of policy will be recommended by the Information Technology Governance Committee working jointly with the Director of Human Resources.
- Access to SSN Information. Only approved university employees, including approved student workers and approved graduate assistants, will have access to SSN data. In order to be authorized to view and use electronic SSN data, approval must be obtained with copies of such authorization sent to the social security officer. Justification should be included as to why an individual needs access to the data. For access to paper copies of documents that contain social security information, each person requiring such access should have on record within the department or unit a signed statement of confidentiality.
-
Transmission of SSN in Electronic Data Files. Social security numbers will be transmitted electronically off the campus system only through encrypted mechanisms, unless otherwise approved by the Information Technology Governance Committee.
- Retention and/or Disposal of Documents containing SSNs. All essential documents containing SSNs, both paper and electronic, will be stored in a secure fashion. Non-essential documents will be destroyed in a secure fashion.
- Form Approval and Disclosures. All university forms and documents that ask an individual to provide his or her SSN must have prior approval of the Director of Human Resources. All forms must use disclosure language substantially similar to the language below.
a. Applicants to DSU for Enrollment. In the admissions and scholarship selection process, the social security number is used to assist in matching test scores and transcripts of the applicants. The social security number is not a permanent student identifier, and it will not be required for student identification purposes. You will be issued a permanent DSU ID number (900#) which will serve as your unique identifier on campus. DSU will not disclose the social security number of any applicant to anyone outside the Mississippi IHL system except as allowed by law or with permission from the individual or as approved by DSU legal counsel.
b. Students. The social security number is not a permanent student identifier, and it will not be required for student identification purposes. A student receives a permanent DSU ID number (900#) which serves as his/her unique identifier on campus. DSU must report names and social security numbers to the IRS for every tuition-paying student. The Department of Financial Aid also has reporting requirements in which social security numbers must be supplied. If any student receives compensation from the university because of employment or other reasons, federal law requires that we report to the IRS that compensation along with the recipient's social security number. DSU will not disclose the social security number of any student to anyone outside the Mississippi IHL system except as allowed by law or with permission from the individual or as approved by DSU legal counsel.
c. Employees. Delta State University is required by federal law to report all compensation of employees, along with their name and social security number, to federal and state agencies, e.g. the IRS. The social security number of an employee is not used as the primary identifier of the employee; a university-issued DSU ID number is used as the primary identifier for the employee. DSU will not disclose the social security number of any employee to anyone outside the Mississippi IHL system except as allowed by law or with permission from the individual or as approved by DSU legal counsel.
d. Others Associated with the University. For individuals who are receiving any compensation, Delta State University is required by federal law to report the compensation, along with their name and social security number, to the IRS, and therefore such individuals are required to supply their SSNs. The social security numbers of these other associated persons are not used as the primary identifiers in the DSU system; a university-issued DSU ID number is used as the primary identifier for these individuals. DSU will not disclose the social security number of any individual to anyone outside the Mississippi IHL system except as allowed by law or with permission from the individual or as approved by DSU legal counsel.
Policy Compliance: All DSU employees will abide by the provisions of this policy and will act to ensure the security of SSNs and other confidential information. A violation of this policy will result in disciplinary action and could result in termination of employment.
Questions about this policy may be directed to the Office of Human Resources.