Faculty, students and staff are expected to follow security policy. The circumvention of security controls for information resources is a violation of this policy. Assisting anyone or requesting anyone to circumvent security controls also is a violation of this policy. All information processing areas used to house information resources supporting mission critical applications must be protected by physical controls that are appropriate for the size and complexity of the operations and the sensitivity of the systems operated at those locations. Physical access to these areas shall be restricted to authorized personnel.
Authorized visitors are to be supervised and their entry and exit recorded in a log.
Each individual should have a unique password. Passwords should not be shared. Passwords should be changed every 90 days on all information resources used for mission critical applications. End-users should secure their workstations used in sensitive or critical tasks with adequate controls to provide continued confidentiality, integrity, and availability of data stored on the system. Also, it is the responsibility of the end user to backup the system as described in CT Operational Guidelines, Backup Procedures, on the CT Home Page.