Policies and Procedures  - College of the Great Smoky Mountains - Southwestern Community College - Policies & Procedures for Employees
» Back to SCC Home

  Last updated 8/4/09

POLICIES & PROCEDURES FOR EMPLOYEES
 
Southwestern Community College - Policies and Procedures Manual
Policy Title: Computer Resources, Network Use, and
Computer and Network Security
3.11
Responsible Division: Administrative Services  
Date Approved: July 2009  
 
1. The computer and network resources owned and operated by Southwestern Community College are intended for the use of its students, employees, and other authorized individuals for purposes related to instruction, learning, research, and administrative operations. Authorized individuals who use the computer network must take all appropriate actions to properly use the equipment and protect the security of associated data and electronic records.
2. Security refers to the protection of computer resources from accidental or intentional disclosure, modification, or destruction. The College’s Technology Services Department strives to maintain the highest level of network security to protect the integrity of all files, electronic records, and student and financial databases. Southwestern Community College abides by the guidelines and policies of the NC Information Resource Management Commission (IRMC).
3. All college employees, requesting access to the College’s network and to the financial and student databases, must complete and sign an Information Technology Services User Authorization Form indicating they understand and comply with the terms and conditions in accordance with college policies related to computer resources, network use, and computer and network security.
4. Access to all college information databases is based on an individual’s job responsibilities and access requirements related to the position. Only minimum access rights, necessary for the performance of assigned duties, will be granted.
5. User access will be reviewed periodically and internal audits will be performed to guard against unauthorized access and security violations.
6. Violations of computer security and unacceptable use will not be allowed and must be reported to the Technology Services staff or College Administration. Unacceptable use is referenced in Policy 3.45 – Appropriate Use of Computing Resources.
7. All electronics connecting the Colleges network(s) to the Internet and other outside networks will be configured with filters and access controls to prevent security breaches.
8. Wireless connectivity to the College’s network will be configured using separate “Internet only” VLANs or connected by use of authentication protocols and servers to enforce access measures that only allow wireless connections from permitted computer devices.
9. All College web servers will be located on a publicly reachable network segment separated from the internal network by a DMZ firewall.
10. College firewalls will be configured to use network address translation (NAT) to hide internal IP addresses.
11. All file and application servers are to be constantly updated with the latest releases and services patches.
12.

High speed remote access to the College network is available through encrypted virtual private network (VPN) connectivity.

Reservation of Rights and Limits of Liability
1. Southwestern Community College reserves all rights in the use and operation of its computer resources, including the right to monitor and inspect computerized files or to terminate service at any time and for any reason without notice.
2. The College makes no guarantees or representations, either explicit or implied, that user files and/or accounts are private and secure. No right of privacy exists in regard to e-mail or Internet usage.
3. The College is not responsible for the accuracy, content, or quality of information obtained through or stored on the College network.
4. The College reserves the right to limit the allocation of computer resources.
5. The College makes every effort to maintain computer resources in good working condition but is not liable for damages incurred by loss of service.
6. The College is not liable, legally, financially, or otherwise, for the actions of anyone connecting to the Internet through the College network(s).
 
»
Chapter 3 Table of Contents
»
Back to Index
»
Back to Policies and Procedures Home

 

 
Southwestern Community College - Policies & Procedures for Employees