Information Systems and Technology

Computer Virus Policy

Purpose
Definitions
Policy
Regulations

Introduction

Computer viruses pose a serious threat to the security and integrity of Harding University's computer systems, applications and data. The growth in distributed computing along with new technologies such as document-resident macros, powerful groupware environments, and the Internet itself has increased the network's vulnerabilities. Computer viruses can cause significant damage in terms of lost work and productivity to the individual directly affected by the virus, the individual's colleagues, and the University as a whole.

While the potential for virus attack on standalone computers is considerable, there is a significantly more dangerous potential for virus attack on our networked computers due to the speed and ease with which viruses can spread across networks.

As a consequence, it is imperative that a virus strategy be adopted and adhered to rigorously. This will reduce the likelihood of a virus outbreak and minimize the risks associated with any virus outbreak. Harding University has a responsibility to protect its resources against the threat of virus infection. Accordingly, all possible points of virus entry (Internet, e-mail, floppy disks, personal computers, gateways, servers, staff computers connected via modem) need to be considered, and appropriate actions must be implemented to counter the risks. The success of this program depends on the products available and the regular use of these products by students, faculty and staff.

Harding University also has a responsibility to provide instruction and direction to the staff of the University in order to raise awareness regarding procedures to be followed to reduce or prevent the possible threat of virus infection to the University's computing resources and information data stores. This involves a combination of approaches to ensure a comprehensive virus protection and prevention policy is in place.

Purpose

This policy defines the virus control measures that are to be implemented and maintained at HU.

Definitions

Personal Computer - Any IBM-compatible personal computer or Macintosh personal computer purchased, leased or rented by the University, whether it be networked or standalone.

Policy

Harding University will provide all University staff with access to supported virus detection and prevention software applications for use on their personal computers.

Harding University will implement procedures to ensure that University personal computers and servers are protected against viruses.

Harding University will promote the widespread use of these tools to staff and will provide appropriate information and guidelines dealing with their correct use.

Regulations

Harding University will maintain a site license and/or make available virus detection and prevention software for personal computers and servers maintained by the University. University clients who have access to networked personal computers will have direct access to the currently supported virus detection and prevention software.

The success of this program depends on a rigorous implementation of procedures to ensure maximum coverage with regard to the timing of virus scans for personal computers, servers, notebooks and floppy disks.

Staff will ensure that the virus protection software installed on their personal computers is in accordance with this policy, and is not tampered with or removed.

The manager of network operations (see Appendix A below) will monitor virus developments and ensure that clients have access to appropriate tools or information to enable them to protect their personal computers against possible infection by a computer virus.

The manager of network operations will thoroughly investigate any report of a virus infection or possible virus infection. If the report is of a serious nature or the effect is widespread, the chief information officer will be informed so that whatever measures are necessary to deal with the matter can be implemented.

Each virus report will be immediately assigned a high priority so that any possible spread or damage is minimized should the virus outbreak be confirmed. Each investigation will identify the nature of the virus, the method or means by which it was introduced onto the campus and the extent of the damage caused by the virus.

The manager of network operations will initiate necessary and appropriate means to ensure that any identified virus infection does not re-occur.

Appendix A

ITS Help Desk
Information Technology Services
501-279-4440
itshelp@harding.edu