Information Services

Personal Computer Security Policy

Further information

Approving body or position: Director of Information Technology Services

Date original policy approved: 2 August 2007

Date this version of policy approved: 2 August 2008

Date policy to be reviewed: 2 August 2007

Contact position: Information Technology Services, IT Security Manager

Related policies or legislation

The purpose of this policy is to set a minimum standard for protecting personal computers (PC) from unauthorised use.

A password enabled screen saver will be activated after 10 minutes of inactivity on the PC. Staff will need to unlock the screen saver by entering their network password. A password enabled screen saver helps protect the information displayed on the screen, stored on the PC hard drive, and accessed from University-wide information sources while staff are away from their PCs.

Definitions

A personal computer (PC) is taken to mean a desktop or notebook computer.

Scope

This policy is intended for staff whose PCs are managed by Information Technology Services.

Policy statement

Unattended screen

  • All personal computers will be configured to have a password-enabled screen saver that will be activated after 10 minutes of user inactivity.
  • A Windows PC should be shut down or locked by pressing the Ctrl+Alt+Del keys simultaneously, then pressing enter or by pressing the Windows logo+L keys simultaneously just before leaving the PC. This prevents a period of vulnerability between the time the user leaves and the time the screen saver lock is activated.

Data privacy

  • Where possible, the PC should be located such that unauthorised persons cannot easily see the information on the screen.

Records management

  • University data should always be stored on a network drive that is backed up each night and never on the PC drive.

Power management

  • A PC should be shut down overnight if possible. It should have the monitor power saving function enabled and enter sleep mode after a period of inactivity no greater than 10 minutes. This will enable conservation of energy in line with the University's environmental policy.