Privacy protection is vague without details of how keystroke monitoring of users is authorized.
This is actually better than the CERT original. What it doesn't do is detail how Institute personnel get authorization to monitor the keystrokes of authorized users. For premises such as residence halls controlled by the institution, an appropriate and responsible authority should be designated to whom application should be made before a search is conducted. The application should specify the reasons for he search and the objects or information sought. The student should be present, if possible, during the search.