WAN (Wide area network) Academic Network (JANET) KEY PRINCIPLES Authorisation Staff All employees must be authorised before using the IS facilities of Edinburgh College. Authorisation is initiated through registration of all employees as part of the College induction process. The registration process grants authorisation to use the core IS facilities of the College, including access to shared and dedicated networked storage. Access rights for other services are controlled by the manager responsible for the service in question and will be appropriate to the needs of the member of staff. Usernames and passwords are allocated and are for the exclusive use of the individual. The user is personally responsible and accountable for all activities carried out under their username. The password associated with a particular personal username must not be shared. Attempts to access or use any username, which is not authorised to the user, are prohibited. No-one may use, or attempt to use, IS resources allocated to another person, except when justifiably authorised by the provider of those resources. A ability to connect to other computer systems through the network does not imply a right to connect to those systems or to make use of those systems unless authorised to do so. All users must correctly identify themselves at all times. A user must not masquerade as another, withhold his/her identity or tamper with audit trails. A user should take all reasonable precautions to protect their resources. In particular: For systems that cannot be protected by the enforcement of regular password changes, must manually invoke password changes according to rules specified by the manager responsible for such systems.
WAN (Wide area network) Academic Network (JANET) KEY PRINCIPLES Authorisation Staff All employees must be authorised before using the IS facilities of Edinburgh College. Authorisation is initiated through registration of all employees as part of the College induction process. The registration process grants authorisation to use the core IS facilities of the College, including access to shared and dedicated networked storage. Access rights for other services are controlled by the manager responsible for the service in question and will be appropriate to the needs of the member of staff. Usernames and passwords are allocated and are for the exclusive use of the individual. The user is personally responsible and accountable for all activities carried out under their username. The password associated with a particular personal username must not be shared. Attempts to access or use any username, which is not authorised to the user, are prohibited. No-one may use, or attempt to use, IS resources allocated to another person, except when justifiably authorised by the provider of those resources. A ability to connect to other computer systems through the network does not imply a right to connect to those systems or to make use of those systems unless authorised to do so. All users must correctly identify themselves at all times. A user must not masquerade as another, withhold his/her identity or tamper with audit trails. A user should take all reasonable precautions to protect their resources. In particular: For systems that cannot be protected by the enforcement of regular password changes, must manually invoke password changes according to rules specified by the manager responsible for such systems.