The Department of Technology and Information Services, in consultation with members of the Auditing Department, is responsible for the security of all computer communications and maintaining audit trails for communications. 409 Page 7 of 9 Requests to add or alter external communication links attached to school system computer equipment must be approved by the requesting department's manager and then forwarded to the Director of Technology and Information Services for evaluation and approval. The Information System Security Administrator and telecommunications personnel will review the request and recommend the appropriate course of action. Three types of access have been identified, each of which will require some combination of administrative as well as technological control. In each case, when permission is granted, the approval will be only for a specifically approved purpose.
Any new application requires a new request for approval.
Access approvals will be maintained by Technology and Information Services Security. Additions to the list can be requested by users on an as-needed basis. For Dial-Out applications to other school system computing facilities, a department must maintain an inventory of users and their specific applications. Dial-in users must submit request forms for approval to Technology and Information Services Security, and a log of these requests must be kept. 409 Page 8 of 9 d.