UHCL Network Use Policy

Purpose

This policy is to augment the University of Houston-Clear Lake Information Security Policies and Procedures approved by CSAC in February 1994 with regards to maintaining appropriate security measures on university computers and networks.

Scope

This policy statement applies to the minimum security requirements for all connections to the university network.

Use of UHCL Network Resources

With the responsibility of providing reliable and secure network availability to the university, University Computing and Telecommunications (UCT) requires:

• Administrator passwords and physical access to all equipment connected to the UHCL network.
• All computer operating systems residing on the UHCL backbone maintain an up-to-date service release pack and security patch as released by their hardware and software vendors.
• At no time will the hardware address of a machine be changed without notification to the Systems Network Administrator.
• Audits of all computer workstations residing on the UHCL network to ensure that these releases and patches are installed in a timely manner.
• Inventories will be completed on a regular basis to insure the hardware address and other related information is accurate.
• UCT will provide ongoing notification to departmental system administrators of Computer Incident Advisory Capability (CIAC)1 advisories and other security alerts as they are received.
• All computer accounts maintained by UCT will be terminated as individuals leave the university.

Failure to comply with the stated policy

In the event that a computer workstation is found in violation of this policy, immediate action will be taken to disable it from the UHCL network. The user will be notified of this action and steps required for the workstation to be reinstated on the network.

After the 1st infraction, the workstation will be more frequently audited and reviewed for adhering to the stated security recommendations.

After the 2nd infraction within a two year period, the owner of the workstation will be required to provide approval from their dean and/or director to restore the network connection. In providing this approval the dean and/or director is assuming responsibility for the integrity of this machine on the network.