Information Resources Use and Security Policy
28. Disciplinary Actions
Violation of this Policy or misuse or destruction of Information Resources can vary in severity and appropriate disciplinary actions should be taken in proportion to the severity of the incident. It is not the role of Information Technology professionals to carry out disciplinary actions as the result of an incident, but it is their role to monitor resources, to identify potential incidents and to bring such incidents to the attention of appropriate university officials. The following guidelines apply:
28.1. Suspected incidents involving student, faculty, or staff misuse of Information Resources should be brought to the attention of the Information Security Office.
28.2. If an investigation involving review of the content of a faculty member, staff member or student's files is required, written permission will be obtained from the Office of Legal Affairs and other departments, as necessary.
28.3. If it is determined that a misuse violation has occurred by a student, faculty member, or staff member, the incident should be brought to the attention of the Information Security Office. The Information Security Office will consult with the Office of Legal Affairs, Human Resource Services or Student Judicial Services, as needed, and in the case of criminal violations, the University Police Department.
28.4. Violations by non-affiliates will be referred to the appropriate authorities. The Office of Legal Affairs may be contacted to provide direction in terms of identifying the appropriate authority.
