Understanding the importance of computer security and individual responsibilities and accountability for computer security are paramount to achieving organization security goals. This can be accomplished with a combination of general computer security awareness training and targeted, product specific, training. The philosophy of protection and specific security instructions needs to be taught to, and re-enforced with, computer users. The security awareness and training information needs to be continuously upgraded and reinforced.
The purpose of the Security Training Policy is to describe the requirements for ensure each user of UTEP Information Resources is receives adequate training on computer security issues.
The UTEP Security Training Policy applies equally to all individuals that use any UTEP Information Resources.
All new users must attend an approved Security Awareness training class prior to, or at least within 30 days of, being granted access to any UTEP information resources.
All users must sign an acknowledgment stating they have read and understand UTEP requirements regarding computer security policies and procedures.
All users (employees, consultants, contractors, temporaries, etc.) must be provided with sufficient training and supporting reference materials to allow them to properly protect UTEP information resources.
The Office of Information Security must prepare, maintain, and distribute one or more information security manuals that concisely describe UTEP information security policies and procedures.
All users must attend an annual computer security compliance seminar and pass the associated examination.
The Office of Information Security must develop and maintain a communications process to be able to communicate new computer security program information, security bulletin information, and security items of interest.
Violation of this policy may result in disciplinary action which may include termination for employees and temporaries; a termination of employment relations in the case of contractors or consultants; dismissal for interns and volunteers; or suspension or expulsion in the case of a student. Additionally, individuals are subject to loss of UTEP Information Resources access privileges, civil, and criminal prosecution. .