System Access and Privacy Policy

CUIT Administrative IDs are assigned to specific individuals to access specific administrative computer systems maintained by CUIT. These IDs are to be used solely for the performance of assigned job functions within the University. CUIT maintains the following policies on the use and security of these IDs and administrative systems.

Violation of these policies can lead to suspension of the ID, pending investigation. Serious violation of these policies will be referred directly to appropriate University or outside authorities. Violations can result in appropriate disciplinary action up to and including termination of employment. Violations which involve criminal offense can result in prosecution by appropriate law enforcement agencies.

1. When the owner of the CUIT Administrative ID leaves the University or changes jobs, the supervisor or department administrator MUST notify Information Security Services so that the ID can be deleted.
2. Unauthorized attempts to gain access to another person's User ID are prohibited.
3. Unauthorized attempts to gain access to applications or data not permitted by the CUIT Administrative ID are prohibited.
4. Individual CUIT Administrative IDs cannot be transferred to or used by another individual. The sharing of passwords is not permitted.
5. Individual users are responsible for all matters pertaining to proper use of the CUIT Administrative IDs assigned to them, including choice of safe passwords, and any recorded access from the ID.
6. CUIT Administrative IDs permit access to University administrative systems on the understanding that the information in those systems is confidential. Each user must take appropriate measure to preserve the confidentiality of that information.
7. No CUIT Administrative ID or administrative system may be used for personal commercial gain.
8. No CUIT Administrative ID or administrative system may be used for any unethical, illegal, or criminal purpose.
9. Use of any CUIT Administrative ID or administrative system by individuals or organizations outside Columbia requires explicit authorization from CUIT and all appropriate data custodians.
10. No CUIT Administrative ID or administrative system may be used to send nuisance messages or files or to send obscene or harassing messages. University policy prohibits the use of University resources to solicit contributions or support for any charity, except those authorized by the University.
11. Electronic mail on the administrative systems is as private as possible. Attempts to read another person's electronic mail are prohibited. System administrators will not read individual's mail unless required to do so in performing their duties, and will treat the contents as private information.

All users of CUIT Administrative IDs and administrative systems should be aware that these systems are University resources. All access, access attempts, and use are recorded in various system logs. System and security administrators review the logs routinely in the course of their work. In addition, security administrators conduct regular reviews of the IDs, including password checks. Users found to have easily guessed passwords may be required to change them the next time they log on.