Devices, Software, Networks, and Remote Access

Devices used to access University systems must be reasonably secure, supported, and appropriate for the information being handled. University-owned technology may be inventoried, configured, updated, monitored, protected, repaired, backed up, restored, isolated, restricted, or remotely secured by authorized Information Technology personnel when reasonably necessary.

Required updates, endpoint protection, screen locks, encryption, firewalls, filtering, device-management software, and other safeguards must remain enabled and current.
Users may not disable, remove, bypass, or interfere with University security, monitoring, filtering, backup, encryption, endpoint-management, or compliance controls.
Only authorized and properly licensed software, applications, browser extensions, devices, cloud services, and integrations may be used for University business or University information.
The University may restrict a personally owned device’s access to University systems when the device creates a security or operational risk. When University-approved device-management tools are used, the University may remove University-managed accounts or University information when access ends or security requires it. The University will not intentionally erase unrelated personal content.
Remote access must use approved methods and required MFA. Users must protect devices and information when learning or working from home, traveling, or using public networks.
Unauthorized routers, wireless access points, switches, bridges, extenders, servers, or network-monitoring equipment may not be connected to University networks. Server rooms, network closets, telecommunications spaces, and other restricted technology areas may be entered only by authorized personnel.