OIT Computer Use & Security Policy

The Office of Information Technology at the Georgia Institute of Technology (OIT) formally signed and began im plementation of its unit level computer use and security policy on Wednesday, September 25, 2002 at 9:00 am. Mr. John Mullin, Associate Vice Provost for Information Technology and Chief Information Officer for Georgia Tech, said in his e-mail announcement of the policy, "I ask you to embrace the spirit of this policy and to practice the highest degree of professionalism as you tack le the challenges of today and the future.".

Four documents are associated with this policy and are available below. If you need another format, please contact Information Security .

The first reference document associated with the approved OIT Computer Use and Security Policy is a brief summary of the policy. This is an overview highlighting areas of interest.

The second reference document associated with the approved OIT Computer Use and Security Policy is an implementation schedule for the policy. The management of OIT recognizes that many of the recommended practices cannot be implemented in stantly; however, the implementation schedule provides guidance on critical areas for immediate responsibility and enforc ement. It also outlines areas that have delayed expectations for compliance.

The third document is the PowerPoint Policy Training Presentation for education and awareness surrounding the OIT Computer Use and Security Policy. While attending a training class is mandatory, this presentation is ava ilable to ensure that the maximum amount of information possible is available.

The fourth document is the actual OIT policy document. The policy is also available through the subject listings below.

The only remaining manditory training time is Tuesday, Nov. 12 (1:30-2:30) in the Clary Theater at the Student Success Center

Registration is required. Please contact Information Security.

The OIT Computer Use and Security Policy

1. Purpose
2. Scope
3. Policy
4. Security Incident Reporting
5. Practices to implement this policy
6. Responsibilites
     6.1 Employees
     6.2 OIT Senior Management
7. Changes to This Policy
8. Recommended Practices and Procedures
     8.1. People/Funding
          8.1. 1. Departmental Computer Support
          8.1. 2. Information Security Staff
          8.1. 3. General OIT Staff
          8.1. 4. Departure or Re-assignment of OIT Employees
     8.2 System/Network Management
          8.2. 1 Minimize Technology Diversity
          8.2. 2 Apply Patches and Updates
          8.2. 3 Manage Access Control Information
          8.2. 4 Logon Banners
          8.2. 5 Connection and Port Control
          8.2. 6 Malicious Software Control
          8.2. 7 Backups and Disaster Recovery
          8.2. 8 Physical Security
          8.2. 9 Accountability and Auditing
9. Definitions