They also have a responsibility for assisting in the protection of the systems they use. They are further responsible for notifying users of their security policies and any changes to these policies. Technical improvements in Internet security protocols should be sought on a continuing basis. At the same time, personnel developing new protocols, hardware or software for the Internet are expected to include security considerations as part of the design and development process. Users are individually accountable for their own behavior.
Users are responsible for their own behavior.
Weaknesses in the security of a system are not a license to penetrate or abuse a system. Users are expected to be aware of the security policies of computers and networks which they access and to adhere to these policies. One clear consequence of this guideline is that unauthorized access to a computer or use of a network is explicitly a violation of Internet rules of conduct, no matter how weak the protection of those computers or networks. Most of the 50 states in the U.S have similar laws. Another aspect of this part of the policy is that users are individually responsible for all use of resources assigned to them, and hence sharing of accounts and access to resources is strongly discouraged.