/
Chapter 3  Acceptable Use Policy Cyber Security for Educational Leaders: Chapter 3  Acceptable Use Policy Cyber Security for Educational Leaders:

Chapter 3 Acceptable Use Policy Cyber Security for Educational Leaders: - PowerPoint Presentation

ellena-manuel
ellena-manuel . @ellena-manuel
Follow
343 views
Uploaded On 2019-11-03

Chapter 3 Acceptable Use Policy Cyber Security for Educational Leaders: - PPT Presentation

Chapter 3 Acceptable Use Policy Cyber Security for Educational Leaders A Guide to Understanding and Implementing Technology Policies Routledge Richard Phillips and Rayton R Sianjina ID: 762612

aup routledge industry 2011 routledge aup 2011 industry user technology acceptable rights users court privacy aups amendment policy speech

Share:

Link:

Embed:

Download Presentation from below link

Download Presentation The PPT/PDF document "Chapter 3 Acceptable Use Policy Cyber S..." is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.


Presentation Transcript

Chapter 3 Acceptable Use Policy Cyber Security for Educational Leaders: A Guide to Understanding and Implementing Technology Policies © Routledge Richard Phillips and Rayton R. Sianjina

Acceptable Use Policy (AUP)AUPs are written agreements signed by users that state specific rules and regulations for technology use.Outline possible punishments and penalties if technology is used inappropriately (iSAFE, 2011). According to Standler, AUPs have three goals:1. Educate2. Provide legal notices3. Protect the organization (lawsuits and viruses) (Standler, 2002)© Routledge

Main Components of an AUPThe Media Awareness Network (2011) lists the following components of an AUP: An explanation of the availability of computer networks to students and staff members in your school or districtA statement about the educational uses and advantages of the InternetAn explanation of the responsibilities of educators and parents for students' use of the InternetA code of conduct governing behavior on the InternetAn outline of the consequences of violating the AUP(Media Awareness, 2010)© Routledge

Main Components of an AUP Cont.A description of what constitutes acceptable and unacceptable use of the Internet A description of the rights of individuals using the networks in the school/district (such as the right to free speech, right to privacy, and so on)A disclaimer absolving the school district from responsibility, under certain circumstancesAn acknowledgement that the AUP complies with provincial and national telecommunication rules and regulations.(Media Awareness, 2011)© Routledge

Important Features of an AUPSignature portion (VDOE, 2011)Disclaimer releasing the industry from user wrongdoing (Media Awareness, 2011) Policy enforcementData collection and alerts (software like eSNIF and VIEW (Fitzer, 2002)Vocabulary and understandable language (Lightspeed Systems, 2011)© Routledge

AUP TemplatesMany individuals and industries have developed templates and guidelines to model AUPs.Wentzell states that every AUP should include the following: PhilosophiesGoalsAdvantages and disadvantages Statements that tech is a privilege and not a rightDefinitions and vocabularyStatement of privacyCopyright and netiquettePersonal responsibility statementAttorney review© Routledge

Acceptable Use Policy: Legal Aspects© Routledge Cyber Security for Educational Leaders: A Guide to Understanding and Implementing Technology Policies

Legal IssuesAcceptable Use Policies are legal binding contracts between users and industries.The user agrees to use the equipment appropriately while the industry agrees to maintain and provide the equipment. However, every AUP is different and is created based on the needs of the industry.Often times when developing Acceptable Use Policies user rights and the rights of the industry conflict.© Routledge

User Rights In the United States the Constitution provides certain “unalienable rights” to its citizens. 1st Amendment — freedom of expression, speech, etc.4th Amendment — no unreasonable searches and seizures, right to privacy.14th Amendment — Equal Protection Clause, and strengthens due process.(U.S .Const., Amends. I, IV, and XIV)© Routledge

Industry RightsProtect the equipment/technology.Establish levels of security. Protect the privacy of employees and users.(iSAFE, 2011)© Routledge

Conflicts When an industry tries to develop an AUP that dilutes the rights of users the dispute is often settled by the U.S. Supreme Court.O’Connor v. Ortega (1987) Private files of a doctor were seized for an investigation.Doctor tried to get the evidence rejected based on 4th Amendment.Supreme Court ruled that “the operational realities of the workplace may make some public employee’s expectation of privacy unreasonable” (Findlaw, 2011). Allowed industries the freedom to search and was later applied to technology (Smith, Woodsum, & MacMahon, 1999)© Routledge

ConflictsReno v. ACLUThe internet is a public forum and a protected form of speech.Strengthened Tinker v. Des Moines court case that disruptive speech can be banned from schools.Schools can limit speech (public) if it has a reasonable risk of disruption (Tedford and Herbeck, 2006).Urofsky v. Gilmore College professors were accused of accessing pornography on campus, they sued based on 1st Amendment and privacy violation.Supreme Court ruled that since the college owned the computers then they could punish and search at will.© Routledge

Larger ContextEach of the cases mentioned have one thing in common … an AUP.Rights of the users were diluted due to the protection of the industry and individuals involved. AUPs have to be reviewed by attorneys for the simple fact that the policy and actions of the user could potentially end up in court.Also, an attorney needs to certify that the document is in compliance with federal and state mandates.(Meyer and Johnson, 2011)© Routledge

ConclusionAUP is a series of guidelines that keep both the user and the organization informed about expectations and what actions are acceptable and what are not. It is also important to involve an attorney due to the fact that AUPs are contracts, and like all contracts can be legally binding and can come under scrutiny, especially when they conflict with personal freedoms. © Routledge