University of Rhode Island Computing and Network Use Policies

ORIGINATOR: Vice Provost for Information Services

DATE: April 2004

POLICY #04-1

Applicability

The purpose of this policy is to put forth acceptable use procedures for users of information technology resources provided by the University of Rhode Island. Departments may have additional policies specific to their unique missions and operational considerations.

General Policy Statement

The computing and networking resources provided by the University of Rhode Island are to be used responsibly in an efficient, ethical and legal manner consistent with the mission of the University. Participation in the community of network and computer users requires adherence to the same ethical code of conduct as in society at large. The fact that an activity is technologically possible does not necessarily legitimize its use. Inappropriate or illegal activities will jeopardize a user's continued access to University's computing and networking facilities.

Computer/Network Accounts and Use

No one shall use another individual's user-id to gain access to University computing resources unless explicitly permitted to do so by the authorized user of the user-id. Users are discouraged from granting such access unless (1) the efficient conduct of University business necessitates access, (2) no other means of providing access is available, and (3) the person to whom such access is granted has responsibilities which would provide similar access via non-electronic means. When these conditions do not apply, both the owner and the individual granted access are responsible for any misuse. Individuals who are granted access to another individual's user-id under these conditions may use the access only for the reasons for which it was granted and are responsible for any unauthorized use.

Files, Data and Programs

Information integrity must be protected on all systems. Users shall not intentionally seek information on, obtain copies of, or modify files, data or programs that reside on university computer systems or are transmitted over university networks that belong to other users, unless authorized by the owner to do so.

Resource Use

The finite capacity of technological resources must be respected and the excessive use of resources must be avoided. Technological resources such as personal computers, dial-up lines, graphics devices, printers, multi-user processor time and data networks must be shared in an equitable manner to meet the demands of the University community. If demand for computing resources exceeds capacity, priorities and limits may be established by information technology resource administrators in consultation with the Faculty Senate. These priorities will be published and promulgated to the University community.

Inappropriate Use

The following uses of resources are expressly forbidden: Network and computing resources shall not be used to harass others, deny service to others, gather information on content or use, violate others' privacy, tamper with security provisions, attempt entry to non-public hosts or perform illegal acts. Attempts to impersonate others or commit fraudulent acts such as altering the "From:" line or disguising the origin of electronic messages are prohibited. Other violations include the creation and dissemination of computer "worms" and "viruses," the sending of electronic chain mail, and the inappropriate sending of broadcast messages.

Proprietary Software and Copyrighted Materials

Copyrighted materials are protected by the U.S. Copyright Act (U.S. Code Title 17). Copyrighted materials may not be used without a documented license. Users do not have the right to make and distribute copies of programs without specific permission of the copyright holder. Unauthorized copying and use of copyrighted material is specifically prohibited. This prohibition extends to using single-licensed copyrighted software on more than one computer system or willfully exceeding the number of permitted simultaneous users on a multi-user software license unless specifically permitted in the software copyright agreement.

The use of copyrighted materials on the network, systems, Web pages, etc. is prohibited unless such use is covered by federal fair use guidelines or has the permission of the copyright owner.

Personal Use

Information technology resources and services are provided to employees for business use. Personal use is permitted when it does not interfere with normal business activities and when it otherwise complies with this policy. Personal use must not involve solicitation, personal financial gain, outside business activities, or political campaigning. Additional limits may be imposed upon personal use by the specific supervisor.

System and Data Administrators

Information technology personnel with special access privileges are exempt from these policies only to the extent necessary to perform their assigned duties and responsibilities. University personnel who have received special or supervisory access to information stored on computing systems or transmitted over university networks are required to keep confidential all information that they might inadvertently see in performing routine monitoring, maintenance and troubleshooting activities.

Security and Privacy

The University employs various measures to protect the security of its information technology resources and of their users' accounts. However, the University's measures do not guarantee security or privacy unless expressly stated. Users should exercise caution in using University resources to transmit confidential data.

The University President or designees may authorize supervisory access to stored or transmitted information when investigating cases of computing abuse or other violations of University policies. The University, at its discretion, may use the results in internal disciplinary proceedings and with law enforcement agencies. Communications made by means of University computing resources may also be subject to Rhode Island's Public Records Statutes to the same extent as hardcopy communications.

Enforcement

Users who violate this policy may be denied access to University information technology resources and may be subject to other penalties and disciplinary action. Violations will normally be handled through University disciplinary procedures applicable to the user. However, the University may temporarily suspend or block access to an account, prior to the initiation or completion of such procedures, when it appears necessary to do so in order to protect the integrity, security, or functionality of University or other computing resources or to protect the University from liability. Computing privileges may be withdrawn when violations have occurred. In addition, violations are subject to judicial proceedings and criminal penalties.