Nicholas School IT Security Policy
DRAFT, Jul-6-2007; NicTAC approved, Nov-30-2007; Dean approved, Dec-27-07
The Nicholas School Information Technology Security Policy is couched within the framework of Duke University's OIT Security Policy Statements(http://www.oit.duke.edu/netid-security/security/index.html).
Keeping shared Nicholas computing resources secure and functioning at their best is one of the Nicholas IT department's primary goals. Details are outlined in the Standard Procedures for Windows and Linux Security.
Minimum requirements for computers on the Nicholas network (including personally owned computers) are:
- Secure passwords on all accounts. This includes a minimum length of eight characters and a combination of characters with upper and lower case letters, at least one special character, and at least one number. An account will be locked after 10 invalid login attempts and the account will be automatically unlocked after 15 minutes.
- Maintenance of an up-to-date operating system, including all security patches, and a functioning procedure for regularly applying updates (e.g., Yum, BigFix, Microsoft or Apple Software Updates).
- Installation of virus scanning software (e.g., Network Associates Virex or VirusScan, or Symantec’s AntiVirus), with current virus definitions, on computers running Microsoft Windows or Apple OS.
To receive administrative rights to Nicholas-owned computers, users must agree to the Nicholas School IT Administrative Access Agreement.
If security is compromised, the computer will be removed from the network.