This is a list of general computer usage policies and security rules that apply to all users of NEESC resources. Principal Investigators and NEESC staff members are responsible for implementing these policies and procedures in their organizations and ensuring that users fulfill their responsibilities. All holders of accounts on NEESC machines are advised to retain a copy of this document for reference and audit purposes.
Computer Use |
Computers, software, and communications systems provided by
the NEESC are to be used only for NEESC-authorized work (as
determined by the NEESC Director or his/her representatives).
Under the terms of Lockheed Martin
Energy Research's contract with the
U.S. Department of Energy, Energy Research retains the right
to monitor the content of all messages and to access any computer files
without prior knowledge or consent of user, sender, or addressee. Any
misuse or unauthorized access is prohibited, and is subject to criminal
and civil penalties.
Accounts on the NEESC machines are for the exclusive use of the individual user named in the account application. Users should not share accounts or passwords with anyone. If evidence is found that more than one person is using an account, that account will be disabled immediately. | ||||||
Passwords |
Passwords must be changed annually. Passwords should
be eight (8) characters long, and contain embedded punctuation marks and/or
digits and a mix of upper and lower case characters. The password must be
changed as soon as possible after an
unacceptable exposure or suspected compromise. Software Use All software used on NEESC computers must be appropriately
acquired and used according to the appropriate licensing. Possession or
use of illegally copied software is prohibited. Likewise, users shall not
copy copyrighted software, except as permitted by the owner of the copyright.
| Sensitive Processing and Data Protection
All Principal Investigators using NEESC resources and NEESC staff members
are responsible for knowing whether their
project generates DOE sensitive data (as defined by
DOE
Order 1240.2B).
NEESC users are required to restrict DOE sensitive data from foreign nationals
of DOE sensitive countries using Unix or DFS access control methods. For
information on DOE sensitive data and countries contact the Office of Domestic
and International Energy Policy, Department of Energy, Washington DC 20585,
202-586-9211.
| Foreign National Access Principal Investigators are required to verify
the citizenship status provided on NEESC
account request forms.
Access to NEESC computers is denied to foreign nationals from countries on the
Department of Commerce "Computer Tier 4" list (see paragraph e of
CFR 15 section 740.7). As of January, 1997, these
countries are Cuba, Iran, Iraq, Libya, North Korea, Sudan, and Syria.
Additionally, no work may be performed on NEESC computers on behalf of foreign
nationals from these countries.
| |
NEESC personnel and users are required to address, safeguard
against and report misuse, abuse and criminal activities.
Misuse of NEESC resources can lead to temporary
or permanent disabling of accounts, loss of DOE allocations, and administrative
or legal actions.