Accounts

Policy Statement

This policy provides direction in creating and maintaining accounts on computerized information systems operated by or on behalf of Adelphi University.

Reason for Policy

帐户为用户提供访问计算机资源和数据的途径。为了确保授权用户访问和防止未经授权的访问信息系统，本策略指导帐户的创建和使用。

Who Is Governed by this Policy

All end-user and application management accounts on computerized information systems operated by or on behalf of Adelphi University.

Policy

1. 只有在获得数据所有者的书面批准后，才能授予、撤销或修改最终用户和应用程序管理帐户访问权限。
2. End-user and application management account access privileges must be reviewed and re-approved by the Data Owner on a regular basis.
3. End-user and application management accounts may only be removed when:
   1. documented approval by the system owner was received, or
   2. an employee termination notice was received from Human Resources, or
   3. after review, the account was not re-approved in a timely fashion

Enforcement

This policy will be enforced by the Office of Information Technology. Violation of this policy may lead to revocation of access to systems.

Deviation from policy

Deviation from this policy may be granted by the Information Security Officer.

Definitions

Data Owner: A role or person who is able and authorized to make informed decisions regarding a particular class of information.

Forms

This policy does not have forms associated with it at this time. Upon periodic policy review this area will be evaluated to determine if additional information is needed to supplement the policy.

Related Information

This policy does not have related information at this time. Upon periodic policy review this area will be evaluated to determine if additional information is needed to supplement the policy.

Document History

• Last Reviewed Date: Fall 2017
• Last Revised Date: Fall 2017
• Policy Origination Date:

Who Approved This Policy

Office of Information Technology