Sample General Security Principles

Users are expected to be aware of the security policies of the computers and networks which they access and to adhere to these policies. Users are individually accountable for their own actions and for all use of the resources assigned to them. The sharing of accounts, passwords, and other assigned resources is unauthorized.

A weakness in the security of any particular system or network is not a license to penetrate or abuse that system or network. The exploitation of software weaknesses to assume a false identity is not allowed. The unauthorized use of a computer or network is a violation of both our own campus computing policies and also Internet rules of conduct.

Users have the responsibility to employ the security mechanisms and procedures which have been made available to them in order to protect their own data as well as the systems and network they use. For systems which rely on password protection this means selecting good passwords, not sharing passwords, and changing passwords immediately upon suspicion that they have been compromised.