Access to Globally Accessible Resources will be granted implicitly, if a user is authorized to access the related system or application. Systems Operating systems, local area networks, and servers will be protected and access to each must be specifically requested and approved by ITS, if not covered by policy or standards. The decision to invoke workstation protection will be made jointly between the DSC, Network Administration, and the ITS Data Security Manager. Application Security Certain applications may have secondary security and require access to be granted within the application, in addition to the access granted in the primary security product of the platform. Access to each application must be specifically requested and approved.
Most applications require training prior to access being granted.
Shared Information and Data Access to Highly Confidential Information may require an additional Confidential Agreement to be signed. This additional requirement will be determined by the Data Owner and the ITS Data Security Manager. Program Product Libraries and Source code Modifications to product libraries and source code must go through ITS Change Management System. Production Data Access to production data is restricted to System Operations Specialists and Application Product Leaders. Test Libraries and Test Data Access should be authorized to Application Development Personnel and to system and storage management functions.