Information Technology Policy - Maryland Public Service Commission

advertisement
IT Policy:
Standard Operating Procedures
Email and Internet Accepted Use Policy
Introduction
This document states the Information Technology Department’s policy and
provides guidance for managing the use of the Internet and email by
Maryland Public Service Commission employees.
The goal is to ensure economical, effective and efficient management of
Internet/email usage and encourage collaborative efforts among the PSC
staff to achieve this end.
Background
The Internet was established as a cooperative effort providing worldwide
networking services among educational institutions, government agencies
and various commercial and non-profit organizations. High speed
networking technologies and developments have made the Internet a
desirable source for expanding research interest and information
dissemination and communications. More recently the Internet has
expanded to include government information, educational information
systems, archives and business resources. The Internet also includes
functions such as those for electronic mail (email), remote computer
network access, file transfers, World Wide Web (WWW), and wide area
information servers.
Use of the Internet has grown exponentially and on-line services have
greatly increased user access to a wider and more diverse user
community of information resources. This dramatic increase in
communication capabilities makes it necessary to establish policies
regarding the proper and efficient use of the Internet.
Scope
The Internet/email is considered to be a fundamental communications tool
that may be used to support the PSC’s missions and information
dissemination requirements. These policies and guidelines apply to the
management of Internet and email services within all organizational units
of the Maryland Public Service Commission, including the use of PSC
provided telecommunications resources in employees’ private residences.
Policy Statement
It is the policy of the Information Technology Department to allow and
encourage the use of Internet services to support the accomplishment of
the various missions of the PSC. Use of the Internet requires responsible
judgement, supervisory discretion and compliance with applicable laws
and regulations. Users must be aware of information technology security
and other privacy concerns. Users must also be aware of and follow
management directives for Internet usage.
Generally, Internet/email services provided by the PSC, like other
equipment and resources, are to be used only for authorized purposes.
However, the Information Technology Department recognizes that it is in
the interest of the PSC that employees become proficient and maintain
proficiency in using the Internet. To this end, the restrictions outlined
below regarding Internet use during official working hours and nonworking hours should be followed by PSC employees using Internet
services provided by the PSC.
a.
b.
Internet services provided by the IT Department during
official duty hours are to be used for authorized purposes
only. This may include using Internet services to train
personnel on using the Internet, provided prior approval is
obtained from an employee’s supervisor.
Internet access should be achieved using standard and
commonly available tools, unless a specific requirement calls
for a unique approach. The IT Department should be
informed in advance of requirements for unique solutions or
approaches.
c.
d.
e.
f.
g.
The IT Department will ensure that the PSC presence on the
Internet fulfills mission requirements in a professional
manner. The IT Department will work cooperatively to
ensure that information made available via the Internet is
accurate, relevant, and up-to-date.
PSC employees may use the Internet to exchange
information with the public and internally as an information
technology tool. It is to be considered as one of a number of
tools to accomplish PSC tasks.
Users must take adequate precautions when processing
data or storing data on computers connected to the Internet
and when transmitting data on or through the Internet. Data
integrity and security ramifications exist under these
circumstances and questions or concerns should be directed
to the Director of Information Technology.
Users must take responsibility to understand the basic
vulnerabilities to viruses and other malicious software
occasioned by use of the Internet.
This policy will assist employees in becoming proficient in
using the Internet and will enhance their professional
development. However, Internet and email services provided
by the PSC shall not be used during non-working hours for
the following activities:
1.
2.
3.
4.
5.
6.
7.
the pursuit of private commercial business activities or
profit-making ventures (i.e. employees may not
operate a business with the use of PSC computers
and Internet resources);
matters directed toward the success or failure of a
political party, candidate for partisan political office, or
partisan political group;
prohibited direct or indirect lobbying;
the exercise or promotion of a religion;
engaging in prohibited discriminatory conduct;
the obtaining or viewing of sexually explicit material;
or
any activity that is unlawful or would bring discredit on
the PSC
Of course, the IT Department expects PSC employees to conduct
themselves professionally while using Department resources, and
employees must refrain from using Department resources for activities
that are disruptive to the work place, such as activities that are offensive to
co-workers or to the public, or in sharp contrast to public trust.
Like all other Government computer use, personal use of the computer
system may be monitored and recorded. Anyone using PSC equipment
consents to such monitoring and is advised that if such monitoring reveals
possible evidence of criminal activity or employee misconduct, evidence of
such monitoring may be brought to the attention of law enforcement
officials at the discretion of the Chairman of the Maryland Public
Service Commission. Individuals are not entitled to an expectation of
privacy while using Government computers. To the extent that employees
wish that their private activities remain private, they should avoid using
PSC computers and systems for such activities.
Limited personal use of email during duty hours is
permissible, as such use will help promote proficiency in
electronic communications, including use of the Internet, and
provides an alternative method for other authorized personal
communications, which will promote PSC efficiency.
At no time may PSC email addresses be used in a manner
which will give the impression that an otherwise personal
communication is authorized by the Maryland Public Service
Commission.
Personal use of IT systems cannot interfere with official
business, such as spending an inappropriate amount of time
during duty hours filling PSC email delivery systems with
personal messages so as to prevent official messages from
being delivered, or disseminating chain letters.
The IT Department has instituted the following email
retention policy:




There is NO single retention period for email messages.
The value of email messages is based upon their
informational content. Messages that are deemed to be
records need to be retained the same length of time that
they would be retained if they were hard copy.
Determination of record status of an email message is
the responsibility of the individual employee.
Inbox messages older than 60-days are automatically
removed once a month
Email databases have been allocated a disk quota size
not to exceed 70MB
Archived email is not subject to a size limitation
Status of email

The state of Maryland and the Federal government recognize that email
messages may contain records in the form of content or attachments.

Email is playing an ever-increasing role in litigation. It is therefore extremely
important that all Maryland Public Service Commission employees recognize
the significance of email messages they create and maintain and do the best
they can to manage them properly

Email is subject to disclosure and discovery. Any public record is subject to
discovery requests as part of a legal proceeding. Discovery may include all
information and data in email that may pertain to the particular court case or
proceeding.

Email is subject to State Public Records and Open records laws.

Email is subject to copyright laws
Download