Policies on Information Technology and Security

REGULATIONS OF THE

UNIVERSITY OF FLORIDA

1.0102 Policies on Information Technology and Information Security.

(1) As part of its educational mission, the University of Florida acquires, develops, and maintains computers, computer systems, networks and other Information Technology (IT) resources. These computing resources are intended for university-related purposes, including direct and indirect support of the university’s instruction, research and service missions; university administrative functions; student and campus life activities; and the free exchange of ideas within the university community and among the university community and the wider local, national, and world communities.

(2) University IT Policies apply to all users of university IT resources, persons and entities that maintain or manage IT resources, their supervisors, and unit administrators, whether affiliated with the university or not, and to all uses of those resources, whether on campus or from remote locations. These policies include but are not limited to the Acceptable Use Policy and the Spam Policy.

(3)     University Information Security Policies apply to all users of university IT resources, persons and entities that maintain or manage IT resources, their supervisors and unit administrators, whether affiliated with the university or not, and to all uses of those resources, whether on campus or from remote locations. These policies are designed to protect the confidentiality, integrity and availability of data and the computers, computer systems, networks, and related devices used to store, process and transmit this data.

(4) University IT and Information Security Policies, as in effect at any particular time, are available at the University IT website at www.it.ufl.edu/policies/.

(5) Failure to follow University’s IT and Information Security Policies may result in penalties and disciplinary action, including but not limited to termination of employment or student expulsion, revocation of user access or other legal sanctions.

Authority: BOG Regulation 1.001.

History: New 5-30-04, Formerly 6C1-1.0102, Amended 3-16-10 (technical changes only), 6-8-12.