USF Polytechnic: Computer Usage and Security Policies

STATEMENT OF POLICY

USF Polytechnic information technology resources are for use by authorized faculty, staff and students. It is the responsibility of all university students, faculty and staff to use these resources in a responsible, ethical and lawful manner. Any member of the university community who abuses these resources has engaged in unacceptable conduct. Activities which intentionally damage or interfere with the work of other users are especially inappropriate and may constitute violations of state law.

Limited access can be granted, in some cases, to students to view and maintain limited personal information. When students are given access to administrative systems for purposes other than viewing/updating limited personal information, and when part-time, temporary or contract workers, and USFP vendors are to be given access to administrative systems, written authorization is required from USF Polytechnic staff or faculty. Students, faculty and staff are responsible for all actions taken using any computer logon ID assigned to them. Appropriate use of a logon ID includes proper password protection for the logon ID, not allowing anyone else to use the logon ID, not using someone else's logon ID and not abusing the privileges granted to the logon ID.

Confidential (or sensitive) information is that information which is confidential by law, including information which requires protection from unauthorized access by virtue of its legal exemption from the Public Records Act, Section 119, Florida Statutes.

Critical information, networks, applications, systems, or data, are those resources determined by management to be essential to USF Polytechnic network's critical functions.

Copyrighted software must only be used in accordance with its license or purchase agreement and must not be copied or altered except as permitted by law or by the software licensing agreement. Unauthorized copying, distribution or use of such software is a violation of state law and the university as well as individuals may be held legally liable for these actions.

Other examples of inappropriate actions under this policy include, but are not limited to, the following:

Unauthorized access, alteration or destruction of another user's data, programs, electronic mail or voice mail.
Attempts to obtain unauthorized access to either local or remote computer systems or networks.
Attempts to circumvent established security procedures or to obtain access privileges to which the user is not entitled.
Attempts to modify computer systems or software in any unauthorized manner.
Unauthorized use of computing resources for private purposes.
Transmitting unsolicited material such as repetitive mass mailings, advertising or chain messages.
Release of confidential information.
Unauthorized release of information.

PROCEDURES

Individual colleges and departmental units shall advise users in their areas of these policies and may also issue additional "conditions of use" for facilities under their control. Such conditions must be consistent with this university policy but may provide additional detail, guidelines, restrictions and/or enforcement mechanisms appropriate to their area. Units may require signatures of individuals acknowledging an understanding of these policies and conditions before providing access.

Violations of this policy may lead to suspension of the user's computer logon ID and/or disciplinary action (including termination or expulsion) to be handled by Student Affairs, deans or directors as appropriate. In any investigation of misuse of information technology resources, the system administrator may inspect, without notice, the contents of computer files, system output, electronic mail and other related materials.

Chapter 815, Florida Statutes, the "Florida Computer Crimes Act," describes offenses which are crimes under Florida law. These offenses include unauthorized modification of programs or data, unauthorized disclosure or use of confidential data, unauthorized access to computer systems or networks and denial of computer system services to an authorized user. Offenses under the Florida Computer Crimes Act shall be investigated by the appropriate law enforcement agencies. Some offenses may require investigation by federal law enforcement agencies.