Board of Regents for Higher Education
for the Connecticut State Colleges & Universities
IT-001 ACCEPTABLE AND RESPONSIBLE USE OF INFORMATION
TECHNOLOGY AND RELATED RESOURCES POLICY
January 2017 Page 2 of 3
To adhere to Acceptable and Responsible Use policy, users of CSCU IT resources must NOT:
• Use CSCU IT resources to violate any CSCU policy or state or federal law.
• Use another person's credentials, User ID, or password to access resources.
• Use another person's files or data without permission.
• Gain unauthorized access or breach any security measure including decoding passwords or accessing control
information, or attempt to do any of the above.
• Engage in any activity that might be harmful to IT resources or to any information stored thereon, such as
creating or propagating viruses, disrupting services, damaging files or making unauthorized modifications to
computer data.
• Make or use illegal copies of copyrighted materials or software, store such copies on CSCU IT resources, or
transmit them over CSCU networks.
• Harass or intimidate others or interfere with the ability of others to conduct CSCU business.
• Directly or indirectly cause strain on IT resources such as downloading large files, unless prior authorization from
the appropriate CSCU authority as determined by the institution is given.
• Use CSCU IT resources for unauthorized purposes which may include but are not limited to, the conduct of a
private business enterprise, monetary gain, commercial, religious or political purposes.
• Engage in any other activity that does not comply with the general principles presented above.
No Expectation of Privacy
All activities involving the use of CSCU IT systems are neither personal nor private. Therefore users should have no
expectation of privacy in the use of these resources. Information stored, created, sent or received via CSCU IT systems is
potentially accessible under the Freedom of Information Act.
Pursuant to Communications Assistance for Law Enforcement Act (CALEA), Public Act 98-142, and the State of Connecticut’s
“Electronic Monitoring Notice”, the Board of Regents reserves the right to monitor and/or log all activities of all users using
CSCU IT systems without notice. This includes, but is not limited to, files, data, programs and electronic communications
records without the consent of the holder of such records.
Assurance
Each CSCU institution shall incorporate the Acceptable and Responsible Use Policy as part of the terms and conditions for
issuing institution computer network accounts. Each CSCU institution shall have all full-time and part-time employees,
including student employees, acknowledge that they have read and understand the Acceptable Use Policy. Each CSCU
institution shall make the Acceptable Use Policy accessible to all employees and students.
Enforcement
Violations of CSCU Acceptable and Responsible Use policy may result in appropriate disciplinary measures in accordance with
local, state, and federal laws, as well as CSCU Policies, general rules of conduct for all college and university employees,
applicable collective bargaining agreements, and CSCU student conduct codes.
For purposes of protecting the CSCU network and information technology resources, the BOR Information Security Program
Office, in conjunction with college/university IT department, may temporarily remove or block any system, device, or person
from the CSCU network that is reasonably suspected of violating CSCU information technology policy. These non-punitive
measures will be taken to maintain business continuity and information security; users of the college/university information
technology resources will be contacted for resolution.
Exception Process
CSCU recognizes that some portions of the Acceptable and Responsible Use of Information Technology Resources Policy may
have to be bypassed from time-to-time because of technical or business reasons.