Events

Information

Join CompSoc

Network

Home

Preliminary IT Security and Privacy Statement

---

Disclaimer
Nothing in this document will constrain the rules given in the University Policy.

1. Rules

   1. Usage of the Oxford University Computer Society's computers is subject to authorization.
   2. All users of the system must comply with the laws governing usage of computers, and the rules of the Oxford University Computer Society.
   3. Users must not indulge in unacceptable activities. Examples include, but are not limited to:
      1. attempting to access IT Facilities without authorization,
      2. misuse of information or IT Facilities,
      3. masquerading,
      4. writing programs with malicious intent,
      5. introducing programs with malicious intent,
      6. software theft,
      7. harrassing, or interfering with, other persons,
      8. disregard for "computer etiquette",
      9. sending chain e-mail
   4. No material that may cause undue offence may knowingly be transmitted, received, or handled on, or via, the Society machines.
   5. Users of the machines are responsible for understanding and respecting these rules, along with the University Policy on IT Security and Privacy, and any current or future rules of the Society, or University.
   6. Users must give due consideration to the need to maintain the reputation of the University, the Society, and their members.
   7. Systems Administrators and the Committee have the right to monitor the machines, and/or network traffic, or revoke access authorization to the machines pending the investigation of a security or privacy incident.
   8. Users will not have their authorization withdrawn unless deemed necessary by the Systems Administrators, and/or the Committee. If a user has their authorization withdrawn, there is an appeals mechanism by which the affected user can object and request reinstatement of authorization to access the facilities. Details can be obtained from the Secretary.
   9. Systems Administrators will not look at users private files without asking the users permission, except in exceptional circumstances, when the System Administrators must inform the Society's Senior Member.
   10. It is the user's responsiblity to control access permissions to their files. For example, the user will understand that group read access means that that file can be read by all members of that group.

2. Additional Information

   1. Registration Procedure
   2. Investigation Procedure
   3. Appeals Procedure
   4. Definition of who can use the Society Machines
   5. Security Reporting Procedure
   6. Management Procedure for Investigation Security Breaches
   7. Security Level Description
   8. Strategies for Security
   9. Other Security Issues

3. Definitions

   1. Society - The Oxford University Computer Society
   2. Committee - The Committee of the Oxford University Computer Society
   3. University - The University of Oxford
   4. System Administrator - Any person who has privileged access to the machines for the purposes of maintaining and managing services provided by the machines for the use of others