|
|
|
TCU Computing Resources Policy
This policy is applicable to all University students, faculty and staff and to others granted use of university computing resources as defined in this policy. This policy refers to all university computing resources, whether individually controlled or shared, stand-alone or networked. It applies to all computer and computer communication facilities owned, leased, operated or contracted by the University. This includes word processing facilities, personal computers, networks, workstations, mainframes, minicomputers, and associated peripherals and software, regardless of whether used for administration, research, teaching or other purposes ("collectively, university computing resources"). It is the responsibility of every person who uses university computing resources to read and abide by these policies.
A. University Regulations Regarding the Use of Computers and Networks
Individuals provided access to university computing resources assume responsibility for their appropriate use. The University expects all such persons to be careful, honest, responsible, and civil in the use of computers and networks. Individuals using wide-area networks (such as the Internet) to communicate with individuals or to connect to computers at other institutions are expected to abide by the rules for the remote systems and networks as well as those for TCU's systems. Individuals authorized access to University computing resources are responsible for actions resulting from improper use or failure to protect those resources including remote access or use by another person. In addition to violations of University rules, certain computer misconduct is prohibited under federal and state laws, and is, therefore, subject to criminal penalties. Such misconduct includes, without limitation, the following:
- Using university computing resources for illegal activity, for material that publicly advocates illegal activity, or for discussion of illegal activities with the intent to commit them.
- Participating in unauthorized reproduction, storage, or distribution of copyrighted software or other materials (e.g., text, audio, graphics, video) or illegally obtained software.
- Accessing, copying, transporting (to another person or site), modifying, or destroying programs, records, or data belonging to the University or another user without authorization, whether such data is in transit or storage.
- Sharing an account, providing passwords to another person, using another person's password or e-mail address, attempting to breach the security of another user's account, or depriving another user of access to the University's computer resources.
- Using university computing resources to harass, defame, abuse, or threaten others.
- Using university computing resources for any unauthorized non-University related activity.
- Falsely obtaining electronic services or data without payment of required charges.
- Connecting specialized network devices such as routers, firewalls, network address translators (NAT), switches, and wireless access points without prior approval.
- Failing to register all networked computers with Technology Resources or not using assigned IP addressed.
B. Privacy of Information
University computers are intended for University related activities only. (The intent of “University related activities” is not meant to prohibit the periodic personal use of University computers for convenience, but abuse.) Information stored on a computer system or sent electronically over a network is the property of the individual who created it. Examination of that information without authorization from the owner is a violation of the owner's rights to control his or her own property. Systems administrators, however, may gain access to user's files when it is necessary to maintain or prevent damage to systems or to ensure compliance with other University rules.
Computer systems and networks provide mechanisms for the protection of private information from examination. These mechanisms are necessarily imperfect and any attempt to circumvent them in order to gain unauthorized access to private information (including both stored computer files and messages transmitted over network) will be treated as a violation of privacy and may subject a violator to disciplinary action.
In general, information that the owner would reasonably regard as private must be treated as private by other users. Examples include the contents of electronic mail boxes, the private file storage areas of individual users, and information stored in other areas that are not public. That measures have not been taken to protect such information does not make it permissible for others to inspect it.
On shared and networked computer systems certain information about users and their activities is visible to others. Users are cautioned that certain accounting and directory information (for example, user names and electronic mail addresses), certain records of file names and executed commands, and information stored in public areas, are not private. Nonetheless, such unsecured information about other users must not be manipulated in ways that they might reasonably find intrusive; for example, eavesdropping by computer and systematic monitoring of the behavior of others are likely to be considered invasions of privacy that would be cause for disciplinary action.
C. Use of Facilities
Computer and network facilities are provided to authorized persons for their University related activity use. These facilities have tangible value. Consequently, attempts to circumvent accounting systems, to use the computer accounts of others, or to duplicate, use, or distribute software without authorization, will be treated as forms of attempted theft.
A user may not attempt to damage or degrade the performance of TCU's computers and networks and should not disrupt the work of other users. Each individual user assumes individual responsibility for the use of his or her accounts. Consequently, users may not disclose their passwords or otherwise make TCU's facilities available to unauthorized individuals (including family or friends). Use of TCU's computers and networks for commercial purposes without authorization is prohibited.
D. Electronic Communication
TCU neither sanctions nor censors individual expression of opinion on its systems. The same standards of behavior, however, are expected in the use of electronic mail as in the use of telephones and written and oral communication. Therefore, electronic mail, like telephone messages, must be neither obscene nor harassing. Similarly, messages must not misrepresent the identity of the sender. Messages should not be sent as "chain letters" or "broadcast" indiscriminately.
Users must take the same care in drafting an email as they would for any other communication. Confidential information should not be sent via email.
E. Plagiarism
Computer programs/other electronic data and documents should be regarded as individual creations and subject to the same standards of misrepresentation of copied work.
F. Security and Privacy
- Users understand that timesharing and network-based system activity is automatically logged on a continuous basis. These logs do not include private user text, mail contents, or personal data, but do include a record of user processes that may be examined by authorized system administrators.
- TCU considers user accounts to be the private property of those who have opened them, and as a result will never ask users to reveal their passwords. However, users who request assistance from Computer Services give the staff implicit permission to view specific data in their accounts that is necessary to investigate, diagnose, or correct the problem.
G. Use of Facilities and the Network
- Physical theft, rearrangement, or damage to any University computer or network equipment, facilities, or property is strictly, prohibited, and will be reported to the police. This includes all public computer labs, network hubs, wiring, and links.
- Users may not "plug-in" personal computers or peripheral devices in public computer labs or onto the University Network without prior authorization.
- Data packets on the network are like voice signals on a telephone line. Just as phone taps are prohibited, so too are attempts to monitor, analyze, or tamper with network data packets.
H. Electronic Communication and Bulletin Boards
- TCU neither sanctions nor censors individual expressions of opinion on its systems. However, obscene or harassing electronic communication (e.g., electronic mail) is prohibited, as are computer messages that actively target individuals in a threatening manner.
- Users who make use of bulletin board systems and other network communication utilities (e.g., Gopher, Newsgroups, the Web, list servers) do so voluntarily, with the understanding that they may encounter material they deem offensive. Students who subscribe, post messages, or simply browse through such utilities must abide by the rules governing each in addition to TCU's rules governing computing on campus.
- Although commercial work is prohibited on TCU systems and networks, some bulletin board systems (BBS) available over the network do make provisions for posting job opportunities and personal items for sale. Such activity is permissible within the constraints of policies specific to each BBS. The staff of Technology Resources takes no responsibility for any fraud or misrepresentation users may encounter (caveat emptor).
I. Cases of Misconduct
- The University's designated computer security officer shall be the primary contact for the interpretation, enforcement and monitoring of this policy and the resolution of problems concerning it. Any legal issues concerning the policy shall be referred to the appropriate officials for advice.
- If system administrators have persuasive evidence of misuse by a user of University computing resources, the University's designated computer security officer shall have authority to inspect files, diskettes, tapes, CD's and/or other computer-accessible storage media.
- By accessing and using the university's computing resources, each system user expressly consents to and acknowledges the University's right, when necessary as a function of responsible system management: to monitor any and all aspects of university computing resources (including, but not limited to, individual user login sessions to determine if a user is acting in violation of University policies or the law); to inspect all electronic files and other electronically recorded information within the university's computing resources; and to intercept, access, disclose and use electronic communications of any user, whether in transit or storage.
- Only the University's designated computer security officer can authorize the monitoring, inspection, interceptions, access, disclosure or use of such electronic data (including, without limitation, electronic mail) when there is reasonable cause to suspect improper use of university computing resources.
- Whenever a case of computer misconduct is suspected or reported, TCU reserves the right to deny system access to any user who violates the rules set forth in this statement. This includes the ability to terminate processes that threaten system security or performance.
- Students will be held to the same standard of conduct (in electronic communication) with faculty, officers and staff of the University. All cases of misconduct will be reported to the appropriate authority for disciplinary action.
J. Rights and Responsibilities
- TCU must ensure that academic work takes precedence at all times over other computing activities in its facilities. In situations of high user demand that may strain available computer resources, TCU reserves the right to restrict (e.g., to specific times of day) or prohibit computer activities such as game playing.
- Mutual cooperation is essential to sustain the free flow of information fostered by campus computers and networks while protecting the integrity and privacy of personal data. Since computer systems and networks are imperfect, users are strongly requested to report any bugs or security holes to the staff of Technology Resources. Likewise, users should not disseminate to others any information that serves to jeopardize, circumvent, or degrade system security or integrity. Users should also be award that certain types of computer misuse (including indirect participation) are illegal under federal and state law.
- Users recognize that systems and networks are imperfect and waive any responsibility for lost work or time that may arise from their use. TCU cannot compensate users for degradation or loss of personal data, software, or hardware as a result of their use of University-owned systems or networks, or as a result of assistance they may seek from Technology Resources staff.
- Users of university computing resources are responsible for insuring proper backup/preservation of all their data.
K. Copyright Infringements
Unauthorized duplication of copyrighted information or data and software packages is a direct infringement under federal copyright law, 17 U.S.C. 101, et seq.
The University supports strict compliance with the federal statutes regarding copyright infringement. It is illegal to make, use, or pass along unauthorized copies of software, graphics, music or any other creative art or intellectual property for multimedia projects or any other use. This includes the copying of software programs, etc., required in a class.
Anyone who engages in illegal copying shall be subject to disciplinary action under the University's policies and, in addition, shall be subject to criminal prosecution under state and federal statutes.
This policy was developed, among other things, to ensure that this University, its students, faculty and staff maintain legal and ethical standards regarding use of copyrighted materials.
Approved by Chancellor's Cabinet May 4, 1999 Revised November 12, 2003
|