MZCET - Computing - Policies - Information Security Policy

Information Security Policy

August 2001

PURPOSE

To establish the basic policy of the College for the use, protection, and preservation of computer-based information generated by, owned by, or otherwise in the possession of the College, including all academic, administrative, and research data ("College Information").

APPLICABILITY

This policy applies to all users of Mount Zion computer facilities and to all College Information.

POLICY

College Information is a vital asset of the College and as such requires protection from unauthorized access, modification, disclosure, or destruction.

RESPONSIBILITIES

Each unit of the College is responsible for identifying and protecting all College Information within its area of control.

Management of each unit of the College is responsible for ensuring that all employees in the unit understand and satisfy their obligation to protect College Information. Management is also responsible for developing and implementing such additional policies and procedures as are necessary to implement fully this Policy.

All users of Mount Zion computer facilities are responsible for complying with this Policy and with any other applicable policies and procedures pertaining to the protection of College Information, including the Mount Zion Conditions of Use and Policy on Computing Ethics and policies regarding disclosure of student or personnel records.

COMPLIANCE

Non-compliance with this policy may lead to disciplinary action by the College, including revocation of computer use privileges and, in the case of employees, dismissal from the College. Under certain circumstances, unauthorized access to or modification, disclosure, or destruction of College Information may give rise to civil and/or criminal liability. Any computer system which fails to comply with security procedures described in the Mount Zion Information Security Management Guidelines or for which no specific procedures are published by the College may be refused access to the Campus Network and may be deemed inappropriate for storing or accessing College Information.