College Policies

BP 8207 College Representation

Statement of purpose

PCC provides many technology products and services to support the academic and administrative needs of the College. Individuals who use the College’s IT resources are expected to follow certain defined behaviors in order to minimize information security risk and protect the College and its constituents.

Protecting students, faculty and staff from the risk of identity theft or unauthorized disclosure of personal information is the primary goal of adopting the best practices described in this policy.

This policy enables PCC IT staff to perform key operational and maintenance tasks, manage information security, and respond to legal requests.

As a public institution, PCC is constrained by laws, regulations, and guidelines as to how it operates. PCC technology is an integral part of that operation.

This policy seeks to ensure that the use of IT resources does not result in violation of PCC’s general obligations as a public institution (e.g.: operating as a private business, endorsing political candidates, etc.). It also seeks to reduce the risk of unauthorized individuals intentionally or inadvertently making public representations on behalf of the College.

Scope statement

All Portland Community College (PCC) employees, students, and affiliates or other third parties that create, use, maintain, or handle PCC IT Resources are subject to this policy. This policy applies to use of all PCC owned and managed IT Resources, use of any computer or mobile device connected to a PCC network, all controlled sensitive data stored or transmitted using PCC IT Resources and all users of such data.

Policy summary

Users shall not use PCC IT resources in a way that is inconsistent with PCC’s status as a public institution, or that violates PCC’s ethics guidelines.

Policy

  1. PCC IT resources shall not be used for commercial or non-PCC academic or administrative purposes unless specifically authorized by other College policies or by the College President.
  2. PCC IT resources shall not be used for the endorsement of any political candidate or ballot initiative unless specifically authorized by other College policies or by the College President.
  3. Users shall exercise caution and good judgement when communicating using PCC IT resources to ensure that any digital content published, posted, transmitted, or otherwise communicated using PCC IT resources is not interpreted as officially representing College positions or policy, unless authorized to do so.

Exemptions

None.

Exceptions

None.

Policy violation

  1. Violation of this policy may result in disciplinary action in accordance with PCC Human Resources and/or Student Conduct guidelines.
  2. PCC reserves the right to report security violations or compromises to the appropriate authorities. This may include reporting violations of Federal, State, and local laws and regulations governing computer and network use, or required accreditation reporting.
  3. Anyone who violates this policy may be held liable for damages to PCC assets, including but not limited to the loss of information, computer software and hardware, lost revenue due to disruption of normal business activities or system down time, and fines and judgments imposed as a direct result of the violation.
  4. PCC reserves the right to deactivate any user’s access rights (whether or not the user is suspected of any violation of this policy) when necessary to preserve the integrity of IT resources.

Complaint procedures

Report non-security-related violations (such as receipt of inappropriate content, other Human Resource policy violations, general college policy violations, or regulatory compliance violations) to a supervisor, HR, or EthicPoint.

Report information security and general technical policy violations to the IT Service Desk at 971-722-4400 or servicedesk@pcc.edu, or contact the CIO or CISO.

Governing standards, policies, and guidelines

None.

Definitions

  • Chief Information Officer (CIO)
    Senior manager of the Information Technology (IT) Department and a member of Cabinet.

    • At PCC, the CIO is responsible for all technology, with the exception of:
      • Online Learning (Academic Affairs)
      • Some specialized technology that supports CTE or other engineering programs (e.g. software that supports machine labs, specialized dental technology, etc.)
      • Some technology that supports auxiliary services (e.g. Point of Sale systems in the cafeterias and bookstores)
  • IT Resource
    (At PCC) All Information Technology (IT) resources that are the property of PCC and include, but are not limited to, all network-related systems; business applications; network and application accounts; administrative, academic and library computing facilities; college-wide data, video and voice networks; electronic mail; video and web conferencing systems; access to the Internet; voicemail, fax machines and photocopiers; classroom audio/video; computer equipment; software and operating systems; storage media; Intranet, VPN, and FTP.

    • IT Resources include resources administered by IT, as well as those administered by individual departments, college laboratories, and other college-based entities.
  • User
    Any person who makes any use of any PCC IT resource from any location (whether authorized or not).

Responsible executive

Chief Information Officer

Responsible officer

Chief Information Security Officer (CISO)

Responsible office

Information Technology Department

Last revision date

11-01-2019