Acceptable Use of University Technology Resources

Unauthorized, irresponsible, or negligent use of University technology resources creates security vulnerabilities, compliance exposure, and operational disruption that affect every member of the campus community. This policy establishes the conditions under which users may access B-CU technology resources and defines the consequences for violations.

This policy applies to all individuals who access or use University technology resources, including faculty, staff, students, contractors, and vendors. It covers all University-owned or University-managed technology, including wired and wireless networks, computing devices, servers, software, data systems, cloud platforms, and email infrastructure. It applies regardless of whether access occurs on campus or remotely, and regardless of whether the device used is University-owned or personally owned.

University Technology Resources. All technology assets owned, leased, or managed by B-CU, including wired and wireless networks, computing devices, servers, software, data systems, cloud platforms, email infrastructure, and any system accessible through University credentials or connected to the University network.

Authorized User. Any individual who has been granted access to University technology resources through the University's provisioning process, including faculty, staff, students, contractors, and vendors operating under an active University agreement.

Acceptable Use Requirements

Authorized Use

Users may access University technology resources for purposes consistent with the University's academic, administrative, and operational mission. Incidental personal use is permitted provided it does not consume significant bandwidth, interfere with University operations, compromise security, or violate any provision of this policy.

Prohibited Conduct

Users may not use University technology resources to:

1. Access, transmit, or store material that is illegal, obscene, harassing, threatening, or discriminatory.

2. Circumvent, attempt to circumvent, or assist others in circumventing authentication systems, firewalls, or access controls.

3. Install, distribute, or execute unauthorized software, including software obtained through unlicensed channels.

4. Share login credentials or allow any other individual to access University systems using their credentials.

5. Use University resources for commercial activity, personal financial gain, or activities that compete with the University's interests.

6. Transmit student records, sensitive institutional data, or personal information through unsecured or unauthorized channels.

7. Engage in activities that consume excessive network resources or degrade service availability for other users.

8. Access, store, or distribute copyrighted material without authorization or in violation of applicable law.

9. Conduct, facilitate, or enable unauthorized scanning, interception, or monitoring of University network traffic.

Security Requirements

All users must comply with the following requirements when accessing University technology resources:

1. Protect login credentials. Passwords and authentication tokens may not be shared with any other individual under any circumstances.

2. Lock or log out of all active sessions when leaving a workstation unattended.

3. Report suspected security incidents, unauthorized access, or potential data breaches to IT Security at ITSecurity@cookman.edu within 24 hours of discovery.

4. Apply CIT-issued security advisories and required updates within the timeframe specified in each advisory.

5. Ensure any personally owned device used to access University data meets the minimum security baseline established by CIT, including current operating system patches and active endpoint protection.

Enforcement Authority

CIT Security and Integration Services is the primary enforcement authority for this policy. The Office of Human Resources, the Office of Student Conduct, and the Office of General Counsel exercise concurrent enforcement authority over violations involving employees, students, and legal matters, respectively. Any supervisor or administrator who becomes aware of a potential violation must report it to CIT Security within one business day.

Monitoring

CIT may monitor University technology resources, including network traffic, system activity logs, and stored data, to investigate suspected violations, respond to security incidents, and ensure operational integrity. Users have no expectation of privacy in their use of University technology resources.

Consequences

Violations of this policy may result in one or more of the following: immediate suspension of technology access pending investigation; disciplinary action up to and including termination of employment or dismissal from the University; civil or criminal referral where required by applicable law; and financial liability for costs or damages caused by willful or negligent misuse.