These procedures may include but are not limited to the granting and prudent administering of passwords. Corporate data must be protected from negligent and intentional damage. The IS group shall develop, implement, and be responsible for redundant backup systems that ensure the safe and effective storage of critical corporate data. Information systems and data which is accessed on the client workstation becomes the direct responsibility of the client user. Critical information systems and their data should be stored using network backup facilities.
Information stored on client drives is the direct responsibility of the individual using the client.
Therefore, individuals with corporate data must regularly back up their client drives. Information stored, maintained, or accessed on individual computers that is in violation of any state or federal laws, including but not limited to copyright laws, will be construed as a violation of these policies. Release of data should be in compliance or in keeping with corporate, client, funder confidentiality policies. The Internet may not be used to access other systems for which the user has no authorization. Failure to report unauthorized Internet use is a violation of corporate policy and subject to disciplinary action up to and including immediate termination.