Article 55 – Acceptable Use Policy
49120.5 Policy Directives
-
The department shall ensure users:
-
Only access their department provisioned accounts from department-authorized equipment while performing departmental-related tasks.
-
Report the unauthorized use or disclosure of confidential and sensitive department data to the Information Security Officer (ISOInformation Security Officer).
-
-
The department shall ensure that users do not:
-
Use department information assets to engage in or solicit the performance of any activity that violates laws, regulations, rules, policies, standards, and other applicable requirements issued by the federal government, the State of California, and the department.
-
Use department information assets for personal enjoyment, private gain or advantage, personal gain, political activity, unsolicited advertising, unauthorized fundraising, or an outside endeavor not related to department business.
-
Engage in any activity that attempts to circumvent or alter the function of the department’s security controls (e.g., spoofing email, anonymous proxies, or unauthorized encryption), or other activities that may degrade the performance of information resources or may deprive an authorized user the access to department assets.
-
Share their work-related account(s), passwords, Personal Identification Numbers (PIN), security questions/answers, security tokens (e.g., smartcard, key fob), or similar information or devices used for authentication and authorization purposes.
-
Use department information assets to send or arrange to send emails or intentionally access sites that contain pornographic, racist, or offensive material, chain letters or unauthorized mass mailings, and malicious code.
-
Connect or otherwise attach unauthorized devices or equipment to department information assets.
-
Download or install unauthorized software.
-
Access or transport department information assets and department data outside of the continental United States unless approved by a hiring authority (HA).
-