6.2 Special Responsibilities for Deans, Department

Heads, Managers and Supervisors

[Excerpt from University Policy 3.10: Computer Use Policy and System Administrator Code of Ethics]

Management should restrict the number of persons granted privileged access to a minimal practicable number, then tell the person who is responsible for overall administration of a system the names of those persons and what functions those persons have been assigned. Persons who are to be given privileged access to a UNT computer system should be selected (or approved) by the Head of the department that owns or manages the operation of the computer system or by another member of management to whom this responsibility has been delegated.

Granting privileged access to UNT computer systems represents an investment of trust. Persons who are to be given such trust by management should be selected carefully, based on personal characteristics of honesty, integrity, and dependable work habits. The manager should clearly define the job responsibilities of each person selected for privileged access to avoid ambiguity over what the privileged user should or should not be doing.

Final responsibility for the security of computer resources rests with the management of the organizations that own or control them. It is the responsibility of management to comply with all computer security standards in force at UNT and to conduct themselves in a manner that will foster security awareness and understanding among users.

  • Ensure adequate training opportunities for your staff. Remember, some staff may need more instruction than others, especially when it comes to scanning for viruses, organizing files into directories or folders, backing up files to diskette or tape, etc.
  • Document, in the Position Planning Guide/Performance Agreement (UPO-31) any special responsibilities in a position with respect to security. Responsibilities should be commensurate with position's authority.
  • Try to carefully assess applicant's trustworthiness before hiring.
  • Notify the appropriate system administrators to disable user IDs or other accounts when an employee responsibilities changes or a termination of employment occurs. If the termination could potentially be hostile, the administrator should request that the user ID(s) be disabled immediately.
  • If you supervise a system administrator (network/file server manager, other multi-user system manager), review the UNT Information Security Handbook for Faculty, Staff, and Students with that person.
  • Promptly report ongoing or serious problems regarding inappropriate computer usage.