Internet Use Policy

The Internet is recognized as an important communication and research tool for Externis network users. This policy details standards for the secure use of Internet facilities for Externis purposes.

Conditions Governing use of Externis Internet Facilities

All users must adhere to the following when using Externis facilities to connect to the Internet:

• Access to the Internet is provided for Externis purposes and must not be abused for personal use.
• Commercial use, which is not connected to or approved by Externis, is strictly prohibited.
• Internet access in Externis is available only via the Externis infrastructure. Users should not connect to the Internet via a dial-up ISP account on Externis computers connected to the network.
• Users are expected to act ethically and responsibly in their use of the Internet and to comply with the relevant national legislation, the Externis Information Security policy, regulations and codes of practice. Users must not post messages on forums or websites which are likely to be considered abusive, offensive or inflammatory by others.
• Users must not use the Externis Internet connection to scan or attack other individuals/devices/organizations. The use of port scanners or other hacking tools is strictly prohibited.
• Users should be aware that the public nature of the Internet dictates that the confidentiality and integrity of information cannot normally be relied upon. Where a requirement exists to send or receive confidential or commercially sensitive data over the Internet, a security mechanism recommended by IT Services should be used. 
• Passwords used for personal Internet services should not be the same or similar to passwords used for services accessed within Externis.  This is to prevent passwords that grant access to Externis IT resources being sent out on the Internet in clear text where any Internet user can potentially see them. Similarly, any username used for the Internet services should not be the same or similar to a Externis username.
• Software copyrights and license conditions must be observed.  
• The use of the Externis Internet Connection to download or distribute copyright material using peer-to-peer applications is strictly prohibited. IT Services reserve the right to disconnect any machines involved in illegal file distribution from the Externis network.
• All devices connected to the Internet must be equipped with the latest versions of anti-virus software, which has been both approved and supplied by Externis IT Services.
• All forms of data received over the Internet should immediately be virus checked.
• All forms of data transmitted from Externis over the Internet should be virus checked in advance.
• Data, which has been compressed or encrypted, should be decompressed or decrypted as required before virus checking.
• All security incidents involving Internet access must be reported to IT Services.