±¬ÁÏÍø

BP 8207 College Representation

Statement of purpose

±¬ÁÏÍøprovides many technology products and services to support the academic and administrative needs of the College. Individuals who use the College’s IT resources are expected to follow certain defined behaviors in order to minimize information security risk and protect the College and its constituents.

Protecting students, faculty and staff from the risk of identity theft or unauthorized disclosure of personal information is the primary goal of adopting the best practices described in this policy.

This policy enables ±¬ÁÏÍøIT staff to perform key operational and maintenance tasks, manage information security, and respond to legal requests.

As a public institution, ±¬ÁÏÍøis constrained by laws, regulations, and guidelines as to how it operates. ±¬ÁÏÍøtechnology is an integral part of that operation.

This policy seeks to ensure that the use of IT resources does not result in violation of PCC’s general obligations as a public institution (e.g.: operating as a private business, endorsing political candidates, etc.). It also seeks to reduce the risk of unauthorized individuals intentionally or inadvertently making public representations on behalf of the College.

Scope statement

All ±¬ÁÏÍø (PCC) employees, students, and affiliates or other third parties that create, use, maintain, or handle ±¬ÁÏÍøIT Resources are subject to this policy. This policy applies to use of all ±¬ÁÏÍøowned and managed IT Resources, use of any computer or mobile device connected to a ±¬ÁÏÍønetwork, all controlled sensitive data stored or transmitted using ±¬ÁÏÍøIT Resources and all users of such data.

Policy summary

Users shall not use ±¬ÁÏÍøIT resources in a way that is inconsistent with PCC’s status as a public institution, or that violates PCC’s ethics guidelines.

Policy

  1. ±¬ÁÏÍøIT resources shall not be used for commercial or non-±¬ÁÏÍøacademic or administrative purposes unless specifically authorized by other College policies or by the College President.
  2. ±¬ÁÏÍøIT resources shall not be used for the endorsement of any political candidate or ballot initiative unless specifically authorized by other College policies or by the College President.
  3. Users shall exercise caution and good judgment when using ±¬ÁÏÍøIT resources to ensure that any digital content published, posted, transmitted, or otherwise communicated using ±¬ÁÏÍøIT resources is not interpreted as officially representing College positions or policy, unless authorized to do so.

Exemptions

None.

Exceptions

None.

Policy violation

  1. Violation of this policy may result in disciplinary action in accordance with ±¬ÁÏÍøPeople, Strategy, Equity and Culture (PSEC) and/or Student Conduct guidelines.
  2. ±¬ÁÏÍøreserves the right to report security violations or compromises to the appropriate authorities. This may include reporting violations of Federal, State, and local laws and regulations governing computer and network use, or required accreditation reporting.
  3. Anyone who violates this policy may be held liable for damages to ±¬ÁÏÍøassets, including but not limited to the loss of information, computer software and hardware, lost revenue due to disruption of normal business activities or system down time, and fines and judgments imposed as a direct result of the violation.
  4. ±¬ÁÏÍøreserves the right to deactivate any user’s access rights (whether or not the user is suspected of any violation of this policy) when necessary to preserve the integrity of IT resources.

Complaint procedures

Report non-security-related violations (such as receipt of inappropriate content, other People, Strategy, Equity and Culture (PSEC) policy violations, general college policy violations, or regulatory compliance violations) to a supervisor, PSEC, or EthicsPoint.

Report information security and general technical policy violations to the IT Service Desk at 971-722-4400 or servicedesk@pcc.edu, or contact the CIO or CISO.

Governing standards, policies, and guidelines

None.

Definitions

  • Chief Information Officer (CIO)
    Senior manager of the Information Technology (IT) Department and a member of Cabinet.

    • At PCC, the CIO is responsible for all technology, with the exception of:
      • Online Learning (Academic Affairs)
      • Some specialized technology that supports CTE or other engineering programs (e.g. software that supports machine labs, specialized dental technology, etc.)
      • Some technology that supports auxiliary services (e.g. Point of Sale systems in the cafeterias and bookstores)
  • IT Resource
    (At PCC) All Information Technology (IT) resources that are the property of ±¬ÁÏÍøand include, but are not limited to, all network-related systems; business applications; network and application accounts; administrative, academic and library computing facilities; college-wide data, video and voice networks; electronic mail; video and web conferencing systems; access to the Internet; voicemail, fax machines and photocopiers; classroom audio/video; computer equipment; software and operating systems; storage media; Intranet, VPN, and FTP.

    • IT Resources include resources administered by IT, as well as those administered by individual departments, college laboratories, and other college-based entities.
  • User
    Any person who makes any use of any ±¬ÁÏÍøIT resource from any location (whether authorized or not).

Responsible executive

Chief Information Officer

Responsible officer

Chief Information Security Officer (CISO)

Responsible office

Information Technology Department

Last revision date

09-09-2024