Chapter 1: Information Resources Use and Security Policy

1.1 Purpose

It is the purpose of this Policy to:

Establish standards regarding the use and safeguarding of The University of Texas at El Paso (University) information resources;
Protect the privacy of individuals by preserving the confidentiality of Personally Identifiable Information (PII) entrusted to the University;
Ensure compliance with applicable policies and state and federal laws and regulations regarding the management of risks to and the security of information resources;
Appropriately reduce the collection, use, or disclosure of social security numbers contained in any medium, including paper records;
Establish accountability;
Educate individuals regarding their responsibilities associated with use and management of University information resources; and
Serve as the foundation for the University’s Information Security Program, provide the Information Security Office the authority to implement policies, standards, and procedures necessary to implement an effective Information Security Program in compliance with this Policy.

1.2 Policy Statement and Applicability

The University recognizes that its information resources are strategic and vital assets belonging to the people of Texas. Access to these resources shall be appropriately managed. It is the policy of the University to protect against risk of accidental or unauthorized access, disclosure, modification, or destruction of information resources, to maintain the confidentiality, integrity and availability of information resources, and to take efforts to avoid obstacles which may impede University business, research, or other functions of the University.

While the University has the primary responsibility of maintaining the security of its information resources, every data user shares the responsibility of understanding the legal and ethical standards expected in their use. In exercising its responsibilities, the University reserves the right to limit or restrict use based on privacy laws, institutional priorities, agreements, and other considerations. The University may also limit or restrict use when violations of University policy, agreements, or privacy laws require limitation or restriction to protect University information resources.

This Policy applies to:

All information resources owned, leased, operated, or under the custodial care of the University, organization, or facility;
All information resources owned, leased, operated, or under the custodial care of third parties operating on behalf of the University, organization, or facility;
Information resources owned by others, such as political subdivisions of the state or agencies of the state or federal government, in which there is a statutory, contractual, or fiduciary duty to protect the resources while in University custody. If the owner has a more restrictive policy than these policies, then the owner's policy will control; and
All individuals accessing, using, holding, or managing University information resources on behalf of the University, including but not limited to faculty, staff, students, guests, visitors, and external individuals or organizations.

1.3 Scope

The University relies on information resources to support its mission providing access to excellent higher education, advancing discovery of public value, and positively impacting the health, culture, education, and economy of community we serve. These resources are critical to the University's academic, research, and business operations.

The rules and regulations governing the use and protection of information resources policies for the University are intended to supplement existing policies published by the Texas Department of Information Resources (TX DIR), The Board of Regents of The University of Texas System, and The University of Texas System (UT System), as well as reinforcing the Texas Computer Crimes Law and laws governing the use or misuse of state property.