HRS-05 Guidelines for Personal Use of SVC IT Assets

SVC allows authorized users to use company-owned IT resources for non-official purposes when such use involves no additional expense to the company, is performed on the employee’s non-work time, does not interfere with the mission or operations of the company, and does not violate the ethical conduct or Rules of Behavior.

Managers may adopt more restrictive personal use policies or existing labor management agreements may preclude one or more of the personal use guidelines listed below:

• Any use of company-provided IT resources, including e-mail, is made with the understanding that such use may not be secure, is not private, is not anonymous and may be subject to monitoring. Users do not have a right to, nor shall they have an expectation of, privacy while using company-provided IT resources at any time, including accessing the Internet through company-provided connectivity. To the extent that users wish that their private activities remain private, they shall avoid making personal use of company-provided IT resources.
• Employees have no inherent right to utilize company-provided IT resources for personal use.
• Unauthorized or inappropriate use of company-provided IT resources could result in loss of use or limitations on use of equipment, disciplinary or adverse actions, criminal penalties and/or employees or other users being held financially liable for the cost of inappropriate use.
• Users are permitted limited personal use of company-provided IT resources. This personal use shall not result in loss of employee productivity, interference with official duties or other than “minimal additional expense” to the company in areas such as:
• Communications costs for voice, data, or video image transmission;
• Use of consumables in limited amounts (e.g., paper, ink, and toner);
• General wear and tear on equipment;
• Data storage on local storage devices; and
• Transmission impacts with moderate e-mail message sizes, such as e-mails with small attachments.
• Employees are expected to conduct themselves professionally in the workplace and to refrain from using company-provided IT resources for activities that are inappropriate.
• Departments may adopt policies that are more restrictive than these guidelines.
• Future labor management agreements shall comply with this policy.

See Also:

• Rules of Behavior for SVC IT.(Summary Article)
• Rules of Behavior for SVC IT.(Full Document - PDF)

Authority

All computer systems at Skagit Valley College are state property. Even if you are using your personal device, by connecting to the wifi, to Canvas, or to any other system provided by the College, you are using state property. State law requires everyone who uses state property to follow certain laws. Here is the chain of authority governing the College's IT policies:

• Skagit Valley College Policy 8000. Users will abide by all college, state, and federal regulations regarding the acquisition and use of information resources and technology.
• Skagit Valley College Procedure 8000. College IT Department will set forth policies and procedures to comply with State requirements as set by Washington Technology Solutions and the State Cheif Information Officer.
• WaTech IT Policies. A library of 105 Policies covering all aspects of Information Technology in the State.
• WaTech Policy SEC-01. Each agency must develop and implement IT security policies, standards, procedures, and all necessary program related documents. 
• National Institute of Standards and Technology Security and Privacy Controls (NIST SP 900-53 rev. 5). The framework used by Skagit Valley College for IT security policies, standards, and procedures.

Back to top