|
IT-reglement ved UiO: IT-reglement (norsk)| IT-reglement med kommentarer | ved dødsfall | utlevering av hjemmeområde til politi eller påtalemyndighet | reglement for studentforeninger | Rules for the use of IT services |
 |
Rules for the use of IT services at the University of Oslo
Adopted
by the Senate of the University of Oslo on 20 February 1996.
1.
The area of application of these rules
1.1
These rules apply to the use of the IT services of the University of
Oslo. The term IT
services means
common machines and IT systems, end-user equipment, networks, software,
data etc. that are provided by the University, including any local,
national or international network, or any machine or system belonging
to others to which one gains access through such resources. These rules
apply to any member of staff, any student or any other person who is
granted access to the IT services, hereinafter called users.
1.2
These rules
shall be displayed in appropriate places such as computer rooms, and
they shall also be made available in electronic form. They may be
obtained on application to the local IT officer or to USIT. When a user
is registered for the first time these rules shall be handed out to
him/her, or made known to the user in another adequate manner.
1.3
Any user has a duty to be aware of the rules currently in force and of
any supplementary provisions. Such provisions shall be approved by the
IT Council. This does not apply to supplementary provisions relating to
surveillance and sanctions. These provisions shall be approved by the
Senate.
2.
Duty of loyalty
2.1
When users are to identify themselves for the purpose of using the IT
services, they have a duty always to identify themselves with their own
username and password, or in another proper manner.
2.2
Users have a duty to comply with the operating staff's instructions
concerning the use of the IT services. Users also have a duty to
familiarise themselves in a satisfactory manner with any instructions
for use, documentation etc. so that they thereby reduce the possibility
of unknowingly causing risk of interrupting operations or of loss of
data, software or equipment.
2.3
Any user who ceases to be a member of staff, student or approved user
is responsible for ensuring that copies of data, software etc. in the
ownership/possession of the University are safeguarded for the local IT
officer or USIT. Other files etc.that have been stored under the user's
name or the like, shall be deleted by the user in person. If such
deletion is not performed within a reasonable period of time, at the
latest within a period of three months, the local IT officer or USIT
may delete such files. The same applies in the event of death, but in
such cases the relatives of the deceased shall be notified and given
the opportunity to receive copies of the material before deletion is
performed.
3.
Data security
3.1
Users must not contribute to causing any interruption in any part of
the system or in any other manner cause inconvenience to others.
3.2
Users have a duty to take such measures as are necessary to ensure that
any loss of their own data, software or the like shall be minimised
through the making of back-up copies, the proper storage of media, the
observance of recommended routines relating to the network and the use
of such protection mechanisms as are to be found (e.g. "file protection
codes").
3.3
Users have a duty not to make their passwords or any other security
elements known to others.
3.4
If any user is informed that his/her password can be identified by
means of mechanical control routines, the user has a duty to change
his/her password.
3.5
Users have a duty to prevent unauthorised persons from gaining access
to use of the network and IT services, and from gaining access to
machines or entry to rooms where equipment is available, and he or she
shall otherwise contribute to preventing unauthorized persons from
gaining access to the University's equipment. Usernames and passwords
shall not be lent to others.
3.6
Users have a duty to be attentive to the fact that software or data may
contain undesirable elements ("virus") and they shall themselves take
appropriate measures for quality control.
3.7
Users have a duty to report to their immediate superior, local IT
officer and USIT any matter that may be of significance to the security
or integrity of the IT services.
4.
Respect for other users and protection of privacy
4.1
A user shall not attempt to gain unauthorised access to other persons'
data, software etc. or attempt to find out other persons' passwords or
other security elements.
4.2
A user has a duty to be familiar with the rules specifically applying
to personal information. Computerised files containing information
about individuals, about companies or about organisations (natural and
legal persons) may normally only be created with the consent of the
Data Inspectorate. Any user wishing to register personal information
has a duty to ensure that this is permitted under the Personal Data Act
or Regulations issued in pursuance of this Act, or pursuant to any
concession granted to the University. Where any such register fails to
satisfy the said conditions, the user is personally responsible for
applying for the necessary permission. The person responsible for the
service will be able to provide guidance on how users are to proceed.
4.3
Users have a duty of secrecy concerning any person's personal
circumstances of which they become aware through their use of the IT
services.
5.
Proper use and resource economy
5.1
Users are jointly responsible for ensuring that the University's
resources are used in the best possible manner. The term "resources"
means here both time and capacity with respect to machines, network and
personnel affiliated to the activity of the IT services.
5.2
Users shall be very restrictive in their use of the IT services for any
activity that is not directly related to academic work, administration,
their own research, studies or organisational work for any association
at the University.
5.3
Users shall not use the IT services to make defamatory or
discriminatory statements, to spread pornography or confidential
information, to intrude on other persons' privacy or to aid and abet
the commission of any act contrary to statute law or regulations.
6.
Rights
6.1
Normally there are rights attached to both computer programmes and to
data (text as well as collections of information such as data bases)
that make the use of such programmes or data conditional on agreement
with the person holding the right. Users have a duty to respect the
rights of other persons. This applies inter alia in the case of musical
works and other information that is subject to copyright, whether on
the World Wide Web or in other electronic information systems.
6.2
When the University makes software, data or other material available,
the user has a duty to respect such limitations on use as follow from
the agreement. The agreement will be available from the local IT
officer or from USIT.
6.3
A user is not entitled to make copies of programmes by means of the
University's equipment beyond what is laid down in agreements
concerning rights of use (licence agreements). It is not under any
circumstances permissible to copy licensed programmes for private use.
7.
Quality of service and liability for damages
7.1
Users are themselves responsible for the use of information, programmes
etc. made available through the IT services. The University cannot
accept any liability for financial loss suffered as a result of any
error or defect in software, data, use of information from available
databases or other information obtained through the network etc.
8.
Local IT officer and USIT's right of access
8.1
USIT has the right to seek access to the individual user's reserved
areas in the system with intent to: (1) ensuring the functionality of
the system, or (2) checking that the user is not acting or has not
acted in a manner contrary to the provisions of the Rules for the Use
of IT Services at the University of Oslo. It is a condition that such
access shall be sought only where this is of great significance to
operations or to the responsibility of the University, and only where
there are particular grounds for suspicion. Special application shall
be made for access to electronic mail. A local IT officer does not have
access to a user's reserved areas unless he or she is specially
authorised by the University Director.
8.2
If USIT seeks such access, permission shall be obtained in advance from
the University Director, unless there are particularly weighty grounds
for immediate action. Documentary evidence of such weighty grounds
shall be submitted to the University Director after action has been
taken.
8.3
Where the use of a workstation, terminal or any other piece of end-user
equipment is subject to surveillance by a local IT officer or USIT for
reasons of operating security or for any other reason, this shall be
made known by the placing of a mark on the unit or in any other
appropriate manner.
8.4
Any local IT officer and USIT have a duty of secrecy in respect of any
information about the user or the user's activity that is obtained in
this manner, subject to the exception that any matter that may
constitute a breach of these rules may be reported to higher authority.
9.
Sanctions
9.1
Failure to comply with these rules may cause a user to be refused
access to the University's IT services, and there are further sanctions
that the University may apply pursuant to other regulations.
9.2
Failure to comply with provisions relating to the protection of
privacy, secrecy etc. may lead to liability for damages and/or to a
penalty. The normal rules concerning notice of dismissal or summary
dismissal of an employee or disciplinary measures against students may
apply to those who misuse the IT services.
Enhet: USIT, webredaksjon@usit.uio.no
Dokument opprettet: 21.06.2001, verifisert: 21.06.2001