Hughes Springs Independent School District. Acceptable Use Policy

Transcription

1 Acceptable Use Plicy Hughes Springs Independent Schl District Acceptable Use Plicy The term user and users in this dcument refers t any persns using Hughes Springs Independent Schl District (HSISD) technlgy resurces, whether they are a staff member, student, r any ther affiliate f HSISD. Intrductin Hughes Springs ISD recgnizes that access t technlgy in schl gives students greater pprtunities t learn, engage, cmmunicate, and develp skills that will prepare them fr wrk, life, and citizenship. We are cmmitted t helping students develp mdern technlgy and cmmunicatin skills. Within ur cmmitment t these skills, HSISD may prvide Internet access, desktp cmputers, mbile cmputing devices, videcnferencing capabilities, nline cllabratin capabilities, message bards, , and mre t users. The plicies utlined in this dcument are intended t cver all available technlgies, nt just thse specifically listed. This Acceptable Use Plicy utlines the guidelines and behavirs that users are expected t fllw when using schl technlgies r persnally wned devices n campus r fr any ther schl functin. All users are expected t use gd judgment and t fllw the specifics f this dcument as well as the intent in which it is written: be safe, apprpriate, careful and kind; d nt try t get arund technlgical prtectin measures; use gd cmmn sense; ask if yu re unsure. General Usage All resurces prvided by HSISD are intended fr educatinal purpses. Any use f resurces nt in supprt f HSISD s educatinal gals is prhibited. All activity n the HSISD netwrk, District devices, r ther technlgy services, including clud services, may be mnitred and retained fr security, discipline, recrd keeping, and analytical reasns. Students are expected t fllw the same rules fr gd behavir and respectful cnduct nline as ffline. Misuse f schl resurces can result in disciplinary actin. Hughes Springs ISD makes a reasnable effrt t ensure students safety and security nline but will nt be held accuntable fr any harm r damages that result frm use f schl technlgies. Any mdificatins, unauthrized by the Technlgy Department, that harm the integrity f HSISD systems can result in disciplinary actin fr the user and ptential financial respnsibility. Users f any District resurces r persnal devices while within the District are expected t alert the campus ffice and/r the I.T. staff immediately f any cncerns fr safety r security. Page 1 Rev. July 2018

2 Acceptable Use Plicy Cmputing Devices Hughes Springs ISD may prvide users with cmputing devices t prmte learning/prductivity inside and utside the classrm setting. These devices shuld be brught t schl with the student r staff member every day they reprt t schl. Users shuld abide by the same acceptable use plicies when using schl devices ff the schl netwrk as n the schl netwrk. Schl-issued devices may be mnitred utside f the schl netwrk. Any vilatin f schl plicy r misuse f schl resurces regardless f physical lcatin may result in disciplinary actin. Users are expected t treat these devices with extreme care and cautin; these are expensive resurces that the schl is entrusting t the user s care. It is the respnsibility f the user t bring the device t schl charged; the schl is nt respnsible fr r expected t prvide charging ptins fr devices. Users shuld reprt any lss, damage, r malfunctin t teacher, campus ffice, r I.T. staff immediately. Users may be financially accuntable fr any damage resulting frm negligence r misuse as determined by the Technlgy Department. Persnally Owned Devices / Bring Yur Own Device Students with persnally wned devices (including, but nt limited t, laptps, tablets, smart phnes, and cell phnes) are encuraged t use their devices in supprt f their learning if their teacher grants them permissin t d s r ther campus rules allw such use. Otherwise, the devices shuld be turned ff and put away during schl hurs unless in the event f an emergency. During the schl day, n device may be used t recrd, stre, r transmit any type f image, sund, r vide, except fr apprved prjects with the express permissin f the teacher f the class the student is attending at the time f the recrding. It is the respnsibility f the user t bring the device t the schl charged; the schl is nt respnsible fr r expected t prvide charging ptins fr devices. Campus persnnel r the Technlgy Department may deny usage f persnal devices t any user due t miscnduct r if the device is deemed a security threat t the District r ther users. Devices may be cnfiscated if in vilatin f HSISD plicies, including this. Return f the device is cntingent n ffense and/r handbk guidelines. Because f security and cntent cncerns, students are nt allwed t use their wn cellular r any ther cnnectin t access the internet r ther data surces. Student wned devices must be cnnected t the HSISD wireless netwrk designated fr them. Staff wned devices shuld be cnnected t the HSISD wireless netwrk designated fr them especially when using the device fr instructinal purpses. Fr infrmatin regarding which netwrk(s) are apprpriate t cnnect t, cntact yur campus ffice r the Technlgy Department. HSISD is nt liable, financially r therwise, fr damages r repairs resulting frm persnal device usage. Page 2 Rev. July 2018

3 Acceptable Use Plicy Internet Access Hughes Springs ISD prvides its users with access t the Internet, including web sites, resurces, cntent, and nline tls. Access t nline cntent may be restricted and/r censred in accrdance with HSISD plicies and federal regulatins, such as the Children s Internet Prtectin Act (CIPA). Web brwsing may be mnitred and web activity recrds may be retained indefinitely. Users shuld respect that the web filter is a safety precautin and shuld nt try t circumvent it when brwsing the Web. If a site is blcked and a user believes it shuldn t be, the user shuld fllw District prtcl t submit the site fr review. Hughes Springs ISD may prvide users with accunts fr the purpse f schl related cmmunicatin. Availability and use may be restricted based n schl plicies. If users are prvided with accunts, they shuld be used with care. Hughes Springs ISD has chsen nt t limit students capabilities t cmmunicate with rganizatins acrss the cuntry including clleges, testing institutins, schlarship pprtunities, etc. With this capability there is a need t emphasize that capabilities prvided by HSISD are fr schl use nly. Any nn-educatinal cmmunicatin culd be remved withut warning and culd result in disciplinary actin. Users shuld nt send persnal infrmatin; shuld nt use their schl accunt t cnduct r prmte cmmerce; shuld nt use their schl address in assciatin with third party services fr persnal use like Amazn, Facebk, itunes, etc.; shuld nt attempt t pen files r fllw links frm unknwn r untrusted rigin; shuld use apprpriate language; and shuld nly cmmunicate with ther peple as allwed by the District plicy r the teacher. If yu are nt cmpletely sure an r attachment is safe t pen, cnsult the Technlgy Department fr assistance. Users are expected t cmmunicate with the same apprpriate, safe, mindful, curteus cnduct nline as ffline. usage will be mnitred and archived fr a minimum f 10 years in accrdance with state and federal law. Online Strage Staff members and sme students will have access t nline strage allwing them t access their files and shared files n any device anywhere. This brings unique pprtunities t teaching staff and students t cntinue the learning prcess utside the classrm. As with , users shuld nly use this resurce fr schl purpses. Any cntent fund t be withut educatinal value r f malicius intent will be remved withut the user s cnsent. Users fund t be string such cntent culd be subject t disciplinary actin. HSISD des nt directly backup r archive data hsted in the nline platfrm. Instead, HSISD utilizes fault tlerances built int the platfrm. Upn leaving HSISD, it is the user s respnsibility t secure cpies f their persnal data utside f the clud platfrm befre their last date f attendance at HSISD. Users may nt use any nline strage platfrm ther than that which is prvided by the district t stre files and data cntaining infrmatin cncerning students r staff members. Ding s may be in vilatin Page 3 Rev. July 2018

4 f State and Federal law and culd result in discipline, terminatin, and/r criminal charges. Acceptable Use Plicy Web Based Cllabrative Cntent Recgnizing the benefits cllabratin brings t educatin, Hughes Springs ISD may prvide users with access t web sites r tls that allw cmmunicatin, cllabratin, sharing, and messaging amng users. Due t infrmatin security cncerns, staff members shall nt use any nline resurces r sftware which require user registratin r gather any type f user-specific usage data withut the written cnsent f the Directr f Technlgy. The Directr f Technlgy will evaluate the infrmatin security practices as well as the infrmatin used and stred by the third party and allw r deny usage based n these findings. Users are expected t cmmunicate with the same apprpriate, safe, mindful, curteus cnduct nline as ffline. Psts, chats, and messaging may be mnitred and archived. Users shuld be careful nt t share persnally identifying infrmatin nline. Netiquette Users shuld always use the Internet, netwrk resurces, and nline sites in a curteus and respectful manner. Users shuld als recgnize that amng the valuable cntent nline there is als unverified, incrrect, r inapprpriate cntent. Users shuld use trusted surces when cnducting research via the Internet. Users shuld als remember nt t pst anything nline that they wuldn t want parents, teachers, future clleges, r emplyers t see. Once smething is nline, it s ut there and can smetimes be shared and spread in ways never intended. Cyberbullying Cyberbullying will nt be tlerated. Harassing, dissing, flaming, denigrating, impersnating, uting, tricking, excluding, and cyberstalking are all examples f cyberbullying. D nt be mean. D nt send s r pst cmments with the intent f scaring, hurting, r intimidating smene else. Engaging in these behavirs, r any nline activities intended t harm (physically r emtinally) anther persn, will result in disciplinary actin and lss f privileges. In sme cases, cyberbullying can be a crime. Remember that nline activities are mnitred and retained. Plagiarism Users shuld nt plagiarize (r use as their wn, withut citing the riginal creatr) cntent, including wrds r images, frm the Internet. Users shuld nt take credit fr things they didn t create themselves, r misrepresent themselves as an authr r creatr f smething fund nline. Research cnducted via the Internet shuld be apprpriately cited, giving credit t the riginal authr. Cntact instructinal staff fr mre infrmatin n prperly citing research. Page 4 Rev. July 2018

5 Acceptable Use Plicy Netwrk Security Users are expected t take reasnable safeguards against the transmissin f security threats ver the schl netwrk. This includes nt pening r distributing infected files r prgrams, and nt pening files r prgrams f unknwn r untrusted rigin. If a user believes a cmputing device might be infected with a virus, malware, r ther types f malicius sftware, the user shuld turn ff the device and alert the Technlgy Department immediately. Users shuld nt attempt t remve the virus r dwnlad any prgram t remve the malicius cntent. Sftware Dwnlads and Installatin Users shuld nt dwnlad, install, r execute any prgram ver the schl netwrk r nt schl resurces withut express permissin frm the Technlgy Department. Users may dwnlad ther file types, such as images r vides. Fr the security f the HSISD netwrk, dwnlad such files nly frm reputable sites, and nly fr educatin purpses. Persnal & Infrmatin Security Users shuld never share persnal infrmatin including user accunts, passwrds, phne numbers, addresses, scial security numbers, birthdays, r financial infrmatin, ver the Internet withut adult permissin. Users shuld recgnize that cmmunicating ver the Internet brings annymity and assciated risks, and shuld carefully safeguard the persnal infrmatin f themselves and thers. Users shuld never agree t meet smene they meet nline in real life withut parental permissin. HSISD I.T. persnnel may ask fr username and passwrd infrmatin while assisting with prblems and shuld nly d s in persn r ver the HSISD phne system. D nt share this infrmatin with anyne ther than members f HSISD I.T. staff. Requests fr lgin infrmatin by any persn ther than HSISD Technlgy Department persnnel shuld be handled as an attempted system breach and reprted t the Technlgy Department immediately. If a user ever encunters a message, cmment, image, r anything else nline that causes cncern fr their wn r anther users persnal safety, bring it t the attentin f an adult (teacher r staff if at schl; parent if using the device ff-campus) immediately. HSISD staff shuld bring any such cncerns t I.T. staff immediately. Data Classificatin and Handling Data classificatin and handling prvides a framewrk fr classifying and securing data based n the assciated risks, as well as fr applying the apprpriate levels f prtectin as required by State and/r Federal law taking int cnsideratin prprietary, ethical, peratinal, and privacy cncerns. All HSISD data, whether electrnic r printed, shuld be categrized within these criteria. It is the respnsibility f all HSISD users t prtect their wn infrmatin as well as any ther data they may access as part f their duties r accessed inadvertently. These classificatin and handling prcedures apply t all data wned and managed by HSISD. Page 5 Rev. July 2018

6 Definitins: Acceptable Use Plicy Infrmatin Resurces (IR): Any cmputer printuts, nline display devices, magnetic strage media, and all cmputerrelated activities invlving any device capable f receiving , brwsing Web sites, r therwise capable f receiving, string, managing, r transmitting electrnic data including, but nt limited t, mainframes, servers, persnal cmputers, cellular devices, ntebk cmputers, tablet cmputers, hand-held cmputers, persnal digital assistants (PDA), pagers, distributed prcessing systems, netwrk attached and cmputer cntrlled medical and labratry equipment (i.e. embedded technlgy), telecmmunicatin resurces, netwrk envirnments, telephnes, fax machines, printers, and service bureaus and the prcedures, equipment, facilities, sftware, and data that are designed, built, perated, and maintained t create, cllect, recrd, prcess, stre, retrieve, display, and transmit infrmatin n thse resurces. Data Owner: Persns assigned the respnsibility f apprving user accunts and granting access rights t a specific data set within an Infrmatin Resurce by its System Owner. There may be multiple Data Owners within an Infrmatin Resurce, but there will be nly ne Data Owner fr a defined data set. The System Owner will be respnsible fr managing the use f Data Owners, applicable frms and rules t be fllwed. Sensitive Persnal Infrmatin (SPI): An individual s first name r first initial and last name in cmbinatin f any ne r mre f the fllwing items, if the name and the items are nt encrypted. Scial security number; Accunt number r credit r debit card number in cmbinatin with any required security cde, access cde, r passwrd that wuld permit access t an individual's financial accunt; Infrmatin that identifies an individual and relates t: The physical r mental health r cnditin f the individual; The prvisin f health care t the individual; Payment fr the prvisin f health care t the individual. Persnally Identifiable Infrmatin (PII): Infrmatin that alne r in cnjunctin with ther infrmatin identifies an individual, including an individual's: Name, date f birth, r gvernment-issued identificatin number; Mther's maiden name; Unique bimetric data, including the individual's fingerprint, vice print, and retina r iris image; Unique electrnic identificatin number, address, r ruting cde; and Certain telecmmunicatin access device as defined by regulatin Family Educatinal Rights and Privacy Act (FERPA) Prtected Infrmatin: Any infrmatin nt determined t be directry infrmatin by HSISD must be cnsented t by the student s guardian r student f legal age prir t release. Examples include: Any SPI r PII data elements Grade Pint Average/Letter Grades Academic Standing Indicatin f Financial Aid Status Cunseling recrds Academic Cmments General Infrmatin: Any infrmatin that is nt related t SPI, PII, and/r FERPA r nt therwise prtected by regulatin(s) and/r publicly available. This infrmatin will include mst directry infrmatin. Examples include a persn s: Name alng with residential address and/r telephne numbers. Page 6 Rev. July 2018

7 address Age and Sex Title r Psitin Acceptable Use Plicy SPI DATA HANDLING POLICY: All SPI data elements must be encrypted upn remval frm surce repsitry. All SPI data shuld be stred in lcatins nly accessible by the user r ther users wh are permitted t view SPI data. All SPI must be purged as sn as reasnably pssible if residing utside surce repsitry. SPI infrmatin is nly allwed t be transferred frm the surce repsitry t an HSISD managed device r an apprved third party. Only individuals authrized by the Superintendent r Technlgy Directr may have access t SPI. Prcess in place t audit infrmatin resurces that cntain SPI data must be fllwed. Access t SPI data will nly be granted by the data wner r designee. SPI data transmitted ver public netwrks must be encrypted. If any SPI data is prcessed and/r stred by a third-party, the third-party must be evaluated by the Technlgy Directr. Any agreements with third parties that invlve SPI data must be assessed by the Technlgy Directr. Any emplyee that suspects SPI data has been cmprmised, lst, r therwise disclsed withut authrizatin must disclse the incident immediately t their supervisr, Technlgy Directr, and Superintendent. PII DATA HANDLING POLICY: Any PII data element alne r in cmbinatin must have the apprval f the data wner, applicatin manager, r Technlgy Directr prir t being accessed frm the surce repsitry. All PII data shuld be stred in lcatins nly accessible by the user r ther users wh are permitted t view PII data. Any recrd and/r dcument with mre than 3 PII data elements must be encrypted prir t being transmitted and/r stred n public netwrks. PII data stred utside the surce repsitry must be purged as sn as reasnably pssible. PII infrmatin is nly allwed t be transferred frm the surce repsitry t an HSISD managed device r an apprved third party. If any PII data is prcessed and/r stred by a third-party, the third-party must be evaluated by the Technlgy Directr. Any agreements with third parties that invlve PII data must be assessed by the Technlgy Directr. Any emplyee that suspects PII data has been cmprmised, lst, r therwise disclsed withut authrizatin must disclse the incident immediately t their supervisr, Technlgy Directr, and Superintendent. FERPA PROTECTED DATA HANDLING POLICY: All FERPA prtected data elements, alne r in cmbinatin, must have the apprval f the data wner, applicatin manager, r Technlgy Directr prir t being accessed frm the surce repsitry. All FERPA data shuld be stred in lcatins nly accessible by the user r ther users wh are permitted t view FERPA data. Any FERPA prtected data element that can be easily assciated with the individual student must be encrypted prir t being transmitted and/r stred n public netwrks. FERPA prtected data stred utside the surce repsitry must be purged as sn as reasnably pssible. Page 7 Rev. July 2018

8 Acceptable Use Plicy FERPA infrmatin is nly allwed t be transferred frm the surce repsitry t an HSISD managed device r an apprved third party. If any FERPA data is prcessed and/r stred by a third-party, the third-party must be evaluated by the Technlgy Directr. Any agreements with third parties that invlve FERPA data must be assessed by the Technlgy Directr. Any emplyee that suspects FERPA data has been cmprmised, lst, r therwise disclsed withut authrizatin must disclse the incident immediately t their supervisr, Technlgy Directr, and Superintendent. Failure t cmply with these data handling guidelines may be in vilatin f State and Federal law and culd result in discipline, terminatin, and/r criminal charges. Limitatin f Liability Hughes Springs ISD will nt be respnsible fr damage r harm t persns, data, r hardware while using technlgy resurces. While Hughes Springs ISD emplys cntent filtering and ther safety and security mechanisms, and attempts t ensure their prper functin, it makes n guarantees as t their effectiveness. Hughes Springs ISD will nt be respnsible, financially r therwise, fr unauthrized transactins cnducted ver the schl netwrk. Examples f Acceptable Use I will: Use technlgies at schl fr schl related purpses and activities. Fllw the same guidelines fr respectful, respnsible behavir nline that I am expected t fllw ffline. Treat schl resurces carefully, and alert staff if there is any prblem with their peratin. Encurage psitive, cnstructive discussin when allwed t use cmmunicative r cllabrative technlgies. Alert a teacher r ther staff member if I see threatening, inapprpriate, r harmful cntent (images, messages, psts) nline. Cite surces when using nline sites and resurces fr research. Recgnize that use f schl technlgies is a privilege and treat it as such. Be cautius t prtect the safety f myself and thers. Help t prtect the security f schl resurces. This is nt intended t be an exhaustive list. Users shuld use gd judgment when using technlgies at schl. Page 8 Rev. July 2018

9 Examples f Unacceptable Use I will nt: Acceptable Use Plicy Use technlgies at schl in a way that culd be persnally r physically harmful. Attempt t find inapprpriate images r cntent. This includes: viewing, psting, r distributin f messages that are bscene, vulgar, prfane, harassing, sexually riented, sexually explicit, prngraphic, ffensive t thers, r threatening t thers. View r participate in scial netwrk sites r chat rms ther than thse spnsred and verseen by the District. Engage in cyberbullying, harassment, r disrespectful cnduct tward thers. Try t find ways t circumvent the schl s safety measures and filtering tls r tamper with anyne else s cmputer, files, r . Use technlgies at schl t send spam r chain mail. This includes: frgery f electrnic mail messages r transmissin f unslicited junk chain messages. Plagiarize cntent I find nline r engage in unauthrized use f cpyrighted material, including vilating District sftware licensing agreement(s) Install any persnal sftware n District equipment withut apprval f the Technlgy Department. Engage in unauthrized disclsure, use, r distributin f persnal identificatin infrmatin regarding students r emplyees. Engage in persnal plitical use t advcate fr r against a candidate, ffice hlder, plitical party, r plitical psitin, measure, r prpsitin. ( Such activity is nt a vilatin when fulfilling an assignment fr curse credit.) Agree t meet in real life smene I met nline. Use language nline that wuld be unacceptable in the classrm. Engage in use that vilates the applicable cde f cnduct r handbk. Use technlgies at schl fr illegal activities, pursue infrmatin n such activities, r engage in any use that wuld be unlawful under state r federal law. Attempt t hack r access sites, servers, r cntent within the District s netwrk r utside it that is nt intended fr my use. Engage in use related t cmmercial activities r fr cmmercial gain. Advertise fr purchase r sale f a prduct. This is nt intended t be an exhaustive list. Users shuld use gd judgment when using technlgies at schl. Vilatins f this Acceptable Use Plicy Vilatins f this plicy may have disciplinary repercussins, including: Suspensin f netwrk, technlgy, r cmputer privileges Ntificatin t parents Detentin r suspensin frm schl and schl related activities Incur cnsequences under the schl s Student Cde f Cnduct r handbk Incur cnsequences under the Emplyee Handbk Legal actin and/r prsecutin Page 9 Rev. July 2018

10 Acceptable Use Plicy Page Intentinally Left Blank Page 10 Rev. July 2018

11 I have read and understd this Acceptable Use Plicy and agree t abide by it: Acceptable Use Plicy User Printed Name User Signature Date IF FOR A STUDENT: I have read and discussed this Acceptable Use Plicy with my student: Parent/Guardian Printed Name Parent/Guardian Signature Date Page 11 Rev. July 2018