IT Acceptable Use Policy

1. Introduction and purpose

Dandii Boru College's information technology resources are vital assets intended for college-related purposes. This policy establishes the rules for the appropriate use of all college-owned IT resources, including hardware, software, networks, and data, to ensure their integrity, security, and availability.

2. General principles

Authorized users are expected to:

• Use IT resources responsibly, ethically, and in compliance with all applicable laws and college policies.
• Prioritize college business for all use of college-owned IT assets.
• Protect the confidentiality, integrity, and availability of college data.
• Respect the rights of other users and the finite nature of IT resources.

3. Account and access management

• Unique identification: Each user is assigned a unique username and is responsible for all activities conducted under their account.
• Password security: Passwords must be strong, confidential, and changed periodically or if compromise is suspected. Sharing of passwords is strictly prohibited.
• Least privilege: Access to systems and data is granted on a need-to-know basis to perform job functions.

4. Prohibited activities

Users are expressly prohibited from:

• Unauthorized access: Attempting to access data, systems, or accounts they are not authorized to use.
• Data mishandling: Storing, transmitting, or processing college data on unauthorized or personal devices without explicit permission. This includes sensitive student, financial, or personnel data.
• System harm: Introducing malware, engaging in hacking, or any activity that could disrupt, damage, or overload college systems or networks.
• Illegal or unethical use: Using college resources for illegal activities, harassment, commercial purposes, or accessing/posting obscene or offensive material.
• Circumventing security: Disabling or attempting to bypass any security controls, including antivirus software or firewalls.
• Software violations: Installing unlicensed software or violating copyright and software licensing agreements.

5. Data classification and handling

• Confidential data (e.g. student grades, national IDs, financial records): Must be stored only on approved, secure college systems. Transmission must be encrypted.
• Internal use data (e.g. internal memos, departmental data): Must not be disclosed to the public.
• Public data (e.g. published brochures, press releases): Can be freely distributed.

6. Privacy and monitoring

Users should have no expectation of privacy in anything they create, store, send, or receive on the college's IT resources.

While the college respects user privacy, the college reserves the right to monitor, access, and disclose all data on its systems for purposes including, but not limited to:

• Ensuring compliance with policies.
• Maintaining system security and performance.
• Investigating suspected misconduct.
• Complying with legal requests.

7. Violations and enforcement

Violations of this policy will be taken seriously and may result in disciplinary action, up to and including termination of employment or academic expulsion, and/or legal action.

Incidents will be handled by the relevant department (HR, Registrar, Dean's Office) in conjunction with the IT Security Team.

8. Agreement

By accessing and using Dandii Boru College's IT resources, you acknowledge that you have read, understood, and agree to be bound by this policy.