Document ID: chunk:federal_register_of_legislation:F2020L01675:reg:10
Version: federal_register_of_legislation:F2020L01675
Segment Type: reg
Provision Reference: reg 10
Character Range: 7541–9217

10      System security

(1)    If a password is personal to its user, the user must not make it available to anyone else.

(2)    If a user inadvertently obtains information on the information infrastructure to which the user is not entitled, or becomes aware of a breach of security relating to the information infrastructure, the user must immediately report the matter in the way prescribed by order.

(3)    A user must not:

(a)    find out a password for a part of the information infrastructure that the user is not authorised to use; or

(b)    introduce malicious software (for example, a computer virus, ransomware, spyware, a Trojan horse or a worm) into the information infrastructure, including any part of the University's network or any of the University's equipment, whether or not the equipment is connected to the network; or

(c)    copy, disclose, transfer, examine, rename, change, add to or delete information on the information infrastructure belonging to someone else (including the University) without the information owner's express permission, unless it is part of the user's duties as a member of staff of the University to do so; or

(d)    collect or discard any analogue, digital, electronic, printed or magnetic output from the information infrastructure belonging to someone else (including the University) without the owner's express permission, unless it is part of the user's duties as a member of staff of the University to do so; or

(e)    attempt to do anything prohibited under paragraphs (a) to (d).

(4)    A user must not do anything, or omit to do anything, that adversely affects the security of the information infrastructure.