(1) The University of Western Sydney provides computing, networking, information and communication resources to the University community to support teaching and research, student learning, and efficient administrative processes. Access to Information Technology (IT) resources is granted to members of the University community who are enrolled students, employees, members of participating eduroam organisations, or formal affiliates or associates of the University. The University is responsible for protecting its significant investment in IT resources, and must also meet its legal obligations. It will not jeopardise these through the improper actions of any group or individual. Nothing in this policy requires the University to provide remote access or computer laboratory facilities to the University Community. (2) The following definitions apply for the purpose of this policy: (3) a. Authorised User: General authorisation to use IT resources is granted upon enrolment, employment, official affiliation with the University, or as a member of a participating eduroam organisation. Access to specific resources may be further restricted depending on the University's requirements. Authorised users will need to obtain accounts and passwords to enable access to University IT resources. (4) All users of University IT resources are responsible for ensuring that they use them in efficient, ethical, and lawful ways. (5) Only authorised users are permitted access to University IT resources (see Section 2 for definition). (6) The University plans to participate in eduroam; (7) a. All users of eduroam facilities at participating organisations will be subject to the provisions of the policies of their home organisation, policies of the visited organisation, and the Australian eduroam Policy. (8) Authorised users of University IT resources may use them only to discharge the responsibilities of their positions as employees, to further their studies/instruction as students, to conduct their official business with the University, or in other activities sanctioned by the University. All usage must be efficient, ethical and lawful. Questions concerning usage should be referred to Director Information Technology. (9) Passwords and login details are provided for the sole use of the authorised user. They should be treated as private and confidential, and must not be divulged or distributed. (10) a. Users must use only their own account/password on University IT resources. Users are not permitted to access or attempt to access any program, file or other information stored under another person's account. (11) Only the authorised owner or the IT Directorate or authorised support staff may read, change (including remove) or copy any data, programs, files or directories on any University computer or other computers accessed using the University network. (12) A user must not attempt to interfere with IT resources or attempt to subvert the security of any University IT resource. This includes: (13) a. depriving or attempting to deprive other users of resources or access to University IT resources; (14) University IT resources must not be used to copy software, upload or download material that is licensed or protected under copyright or trademark laws unless such activities fall within current licensing conditions and/or copyright legislation. (15) University IT resources must not be used for preparing, storing, receiving, displaying, transmitting or communicating information, material or messages: (16) a. that are inconsistent with the mission or values of the University (17) University IT resources must not be used for commercial or private gain or the gain of a third party, except where there is an established relationship to the University (e.g. a commercial entity of the University). (18) All University IT resources must be treated with care, irrespective of location. No person shall deliberately damage, help to damage or tamper with facilities, resources or services. No University owned or leased IT resource is to be moved off-site without appropriate permission. (19) University IT resources are not to be used to gain unauthorised access to other computers/networks/systems/files/data, regardless of the intention. (20) Users are responsible for the security, privacy and confidentiality of data of a private or personal nature, held or transmitted using IT resources. Users should become familiar with the UWS Privacy Policy Guideline and the Privacy and Personal Information Act 1998 so they are aware of their responsibilities for the collection, use and storage of personal information. (21) Any attempt (successful or otherwise) to invade the privacy of others using IT resources will be regarded as a breach of this policy. (22) The University works to ensure that it manages and uses its IT resources efficiently and effectively. To protect the interests of the University and to ensure compliance with this Policy, the Director Information Technology (or nominee) retains the right to examine any data or files and to monitor computer usage, and to intervene when necessary. (23) Breaches of this Policy will be reported immediately to the Director Information Technology. Complaints in relation to breaches may also be forwarded to the Director Information Technology and the Director Equity and Diversity, for action. In these circumstances confidentiality will be maintained. (24) If the Director Information Technology, believes that unethical or illegal activities, or activities inconsistent with the University's purpose or mission, have occurred, these processes will be followed: (25) a. The Director Information Technology (or nominee) will temporarily suspend the user from access privileges to all IT resources until further investigation. (26) All University IT resource usage is logged and may be audited. Use of eduroam resources may be logged and audited by participating organisations. The University logs and audits the activities of visiting eduroam users. Usage and activity records belong to the University, not to the individual user. In most cases, these are admissible as evidence and are subject to relevant State and Federal Laws. (27) The University is responsible for ensuring the services and resources it provides to its community are used in efficient, lawful, proper and ethical ways. (28) The Director Information Technology (or nominee/s) has the responsibility to: (29) a. Ensure that IT services and resources are being used in an optimal way; (30) Executives/Directors/Managers/Team Leaders/Heads of Schools/Deans of Colleges have the responsibility to do the following: (31) a. Ensure all staff /honorary associates (e.g. contractors, visiting fellows) are made aware of this Policy in relation to their work at the University; (32) Staff, students, and affiliates/associates are responsible for ensuring their usage complies with this Policy, for paying any relevant charges incurred, and for informing the IT Directorate when they cease their association with the University. (33) These are provided to help those responsible for certifying and sponsoring/recommending applications for access to IT resources (internally or remotely). With respect to Internet access, the "AARNet Policy on Allowed Access to AARNet" provides guidelines on allowable access and conditions of access. (34) These should also be considered in respect to applications for Internet services by individuals or groups affiliated/associated with the University. (35) For the purposes of this Policy, a staff member is a person employed as a Higher Education Worker or Academic. Employment may be full-time, part-time or casual. Some types of access are provided routinely to staff to enable them to fulfil their duties. Access to other IT resources may be considered on the following grounds: (36) a. To provide remote access as part of work responsibilities (for example, remote management of facilities) or to support a work/study arrangement (e.g. telecommuting, working on multiple sites, frequent travelling off campus). (37) For the purposes of this Policy, a student is a person enrolled in a course of study or subject units offered by the University. Enrolled students are provided with access to the computing laboratories and network services. (38) Access to IT resources requires an application supported by the Director/Dean/Manager of the area or association, and agreement of the Director Information Technology or nominee. Access to systems and services will expire at the end of the specified period or contract/term of appointment. Affiliates must agree to abide by this and other related policies, including paying for any loss or damage the University may sustain, should they improperly use University IT resources. This category may comprise, but is not limited to the following: (39) a. Consultants and Contractors who require access to IT resources to fulfil the terms of their contract. (40) Within this category, where access levels/types permitted are unclear, clarification should be obtained from the Director Information Technology. (41) Nil. (42) In managing its operations, including those in IT, the University is required to take all reasonable steps to ensure compliance with relevant legislation. The legislation listed on the Associated Information page has helped form this Policy. Users of IT resources at UWS do so subject to all applicable laws and University policies.IT Acceptable Use of Resources Policy
Section 1 - Purpose and Context
Section 2 - Definitions
Section 3 - Policy Statement
Section 4 - Procedures
Part A - Code of Practice
Part B - Privacy
Part C - Breaches and Penalties
Part D - Audits
Part E - Responsibilities
Part F - Categories of Users: Guidelines
Staff members
Students
Individuals or Groups affiliated/associated with the University
Section 5 - Guidelines
Section 6 - References
View Current
This is not a current document. To view the current version, click the link in the document's navigation bar.
b. eduroam: eduroam is a TERENA (Trans-European Research and Education Networking Association) registered trademark, and is an abbreviation of educational roaming. In context of this policy, eduroam is a location independent wireless network, which allows users from participating organisations to use their normal username and password to access network services via other participating organisations.
c. eduroam user: any person granted eduroam access by their home organisation. eduroam users are authorised users for the purposes of this policy.
d. IT - Information Technology.
e. IT Directorate - Information Technology Directorate - IT supports, provides and manages IT resources on behalf of the University
f. IT Resources - IT resources include systems, software, hardware and services. This covers, but is not limited to, computers, terminals, modems, printers, networks (wired and wireless), telecommunication devices (landline and mobile phones, PABX, faxes) storage media and related equipment, data files owned or managed by the University, information systems; and services such as those on the UWS network, (for example, email, internet access).
g. Network - Network hardware and the services operating on the hardware or utilising the hardware to perform tasks. UWS utilises both wired and wireless networks.
h. Passwords/Account codes - The mode of secured personal access to pre-determined IT resources.
i. University - The University of Western Sydney including its six major campuses and various satellite sites.
j. User - Any person who makes use of any IT system, hardware or service owned or leased by UWS.
Top of Pageb. Participating organisations set their own access policies, which may be more restrictive than UWS policies.
b. Users must not attempt to obtain passwords they are not entitled to know. This is applicable to accounts or facilities on University computers or other computers accessed using the University network.
c. Users must not provide their passwords to others.
b. negligently or intentionally degrading the performance of a University IT resource.
b. that may have the effect of harassment of any person or
c. that may be defamatory.
d. This includes, but is not limited to pornography, racism, sexism, obscenities, insults, threats and intimidation.
b. If a breach is found to have occurred, the Director Information Technology, may decide to suspend access privileges for a defined period of time, depending on the seriousness of the offence.
c. Where a staff member has breached this Policy, if the offence is judged to be serious, the procedures outlined in the applicable employment agreement will be followed. Where a student has breached this policy, the procedures outlined in the current Misconduct - Student Non-Academic Misconduct Policy will be followed.
d. Where a breach involves unethical or illegal activities, the University has an obligation to report these to the relevant external law enforcement agencies, and individuals may be subject to prosecution.
b. Fully investigate breaches of this Policy, take action when required and report to other agencies (for example, the police) when necessary;
c. Maintain accurate system records and monitoring records, archiving as appropriate;
d. Assist the University Auditor or any other agencies (with the approval of the Vice-Chancellor or nominee) in investigating suspected breaches or conducting random audits;
e. Disclose usage where appropriate; and
f. Provide access controls where possible to limit usage not consistent with this policy (for example, STD bars, firewalls).
b. Ensure that all work practices comply with this Policy;
c. Lead by example with respect to this Policy;
d. Notify the IT Directorate when a staff member's access to a service or system should be withdrawn;
e. Review applications for use of IT resources, and take responsibility for any costs incurred in respect to this; and
f. Ensure that academics are aware of this Policy when teaching students who are required to use IT resources in their studies so that specific subject requirements comply with this Policy.
b. Board of Trustees Members, Visiting Fellows and Research Associates who need access to IT resources for their University-related activities.
c. External (not-for-profit) community groups who need temporary access to IT resources as part of their operation/function.
d. Official affiliation/associations of UWS (such as PAUWS, the Postgraduate Association of UWS) that need access to IT resources to maintain their affiliation.