Users have a responsibility to protect institutional assets by manitaining proper physical controls on access to equipment and data. Most access to information, however, is controlled through user identification and authentication rather than physical location.
Users are responsible and accountable for work done under their personal identifiers.
Access control violations will be be monitored, reported and resolved. Control of Physical Access to Systems and Data Owners of computer systems of all kinds must protect them from theft and misuse. Owners of multi-user systems must demonstrate that their equipment is physically protected to preclude the possibility that the machine could be compromised through an attack via the system console. If the networking hardware in the closet permits, all computers should be limited to a connection through a specific port. Physical access to institutional data processing areas, equipment and media is restricted to authorized individuals.