Back to Top
Top Nav Content Site Footer
University Home

Policies & Security

Policies

  •  

    Academic Labs

  •  

    Acceptable Use and Security

     Policy Number  Policy Title 
     ITS-0008 Account Privilege Policy
     ITS-0021 Password and Voicemail Code Reset Policy
     ITS-0026 Mandatory Password Change Policy
     ITS-0028 Acceptable Use and Security Policy
      Merit Acceptable Use Policy - Applicable to all users of the University of Detroit Mercy network  
     ITS-0034 Incident Response Plan
     ITS-0035 Access Control Policy
     ITS-0040 Password Standard Policy
     ITS-0042 Antivirus Policy
     ITS-0043 Encryption Policy
  •  

    Advertising Events Online

    Use of technology to advertise University events is often the most convenient and direct way of reaching the Detroit Mercy community. Many areas within the University host events and too much advertising of all these events can be overwhelming for any individual. At many universities, advertising of events is centrally controlled but Detroit Mercy has yet to take this step. All use of technology for advertising have rules and restrictions that are enforced. Before attempting to advertise, please become familiar with the rules and restrictions.

    Advertising via Email Listservs

    The ITS department manages a number of specialized listservs to provide a convenient way to reach various groups of the Detroit Mercy community very easily. Members of the community are automatically enrolled based upon their various status levels within the TitanConnect system. A guideline on when and how to use the lists was created by the Shared Governance IT Team and adopted as policy by the ITS department. Senders who wish to use these listservs should review the guidelines in their entirety before attempting to send a message. All messages send (except those to the faculty listserv) are reviewed by an individual during normal business hours before being released for distribution. The guidelines are available here.

    Advertising via Detroit Mercy TitanTV Channels 97 or 98

    The ITS department manages the closed-circuit cable TV environment that provides service to the 500+ residence rooms as well as various locations across the McNichols campus. Two of the channels on the system, 97 and 98, are dedicated to Detroit Mercy content. Channel 97 provides video content and channel 98 is the standard public access content station that provides a sequence of slides of events. Promotional information for University events may be requested for play on either channel by submitting the request through the ITS Help Desk system (hd.udmercy.edu) and selecting the appropriate category. Video content will need to be provided in an MPG or MP4 format.

    Advertising via TitanConnect Major Announcements Channel

    As users log into the TitanConnect portal each day, a Major Announcements channel is presented and generally contains information pertaining to major events taking place on campus. A custom message is displayed to students and a different custom message is displayed to employees. When appropriate, the same message is displayed to both groups. To request the posting of a message in the TitanConnect Major Announcements channel, please make that request by email to its@udmercy.edu

    Advertising via Campus Connection

    Authored by the Marketing & Public Affairs department, Campus Connection is an electronic newsletter that contains information on University events, news and employee accomplishments.  It is published on a varying schedule (typically once a week during Term I and II and once a month during the summer). To submit information for Campus Connection, visit the newsletter and use the "Submit News/Events" link.

    Advertising via the Detroit Mercy Events Calendar

    The public events calendar is also maintained by the Marketing & Public Affairs department, which determines which events to include.

    • McNichols Campus events will be considered for the calendar if they are submitted via the Event Request process and promotion is asked for in the request form.
    • For consideration of events scheduled on the Riverfront (Law) or Corktown (Dentistry) campuses, send information to marketing.pub.aff@udmercy.edu.

    Advertising via www.udmercy.edu

    Requests for advertisement on the University's main website should be submitted to the Marketing & Public Affairs department. Bear in mind that the main website is intended primarily for recruitment of potential students.

    Advertising via Social Media (Facebook, Twitter, etc.)

    Requests for advertisement on the University's official Facebook and Twitter accounts should be submitted to the Marketing & Public Affairs department.

  •  

    Audio-Visual

     Policy Number  Policy Title 
     ITS-0022 Audio-Visual Reservation Policy
  •  

    Data Retention

     Policy Number  Policy Title 
     ITS-0015 E-Discovery Policy
      Social Security Number Privacy Policy (Human Resources)
    ITS-0018 Social Security Number Privacy Policy (ITS)
    ITS-0018 Patriot Act - "An Act to deter and punish terrorist acts in the United States and around the world, to enhance law enforcement investigatory tools, and for other purposes. This Act may be cited as the `Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT ACT) Act of 2001'."  
  •  

    Email

     Policy Number  Policy Title 
     ITS-0009 Email Account Naming Policy
     ITS-0010 Email Account Removal Policy
     ITS-0011 Email Backup and Restore Policy
     ITS-0019 Guidelines for Mass Electronic Communications
     ITS-0020 All@listserver.udmercy.edu Policy
     ITS-0024 Student Email Policy (President's Council) 
     ITS-0029 Email Client Support Policy 
      CanSPAM - "An act to regulate interstate commerce by imposing limitations and penalties on the transmission of unsolicited commercial electronic mail via the internet."  
  •  

    Help Desk

     Policy Number  Policy Title 
     ITS-0016 Help Desk Support Policy 
     ITS-0023 Printer Repair Policy
      Resident Student Service Level Agreement - Applicable to all resident students  
  •  

    Licensing and Copyright

     Policy Number  Policy Title 
     ITS-0014 Unauthorized Distribution of Copyrighted Materials Policy
     ITS-0017 Anti-Piracy Policy
      Teach Act of 2002 - "The TEACH Act expands the scope of educators' rights to perform and display works and to make the copies integral to such performances and displays for digital distance education, making the rights closer to those we have in face-to-face teaching."  
      The Digital Millennium Copyright Act of 1998 (DCMA) - "The Digital Millennium Copyright Act (DMCA) was signed into law by President Clinton on October 28, 1998. The legislation implements two 1996 World Intellectual Property Organization (WIPO) treaties: the WIPO Copyright Treaty and the WIPO Performances and Phonograms Treaty. The DMCA also addresses a number of other significant copyright-related issues."  
    Higher Education Act - Annual Illegal Downloading Disclosure - The HEOA primarily addresses obstacles that make it difficult for qualified students to obtain a college education, but it also includes specific statements requiring colleges and universities to comply with digital copyright laws.
  •  

    Network Services

     Policy Number Policy Title 
     ITS-0003 Resident and Non-Resident Student Network Connectivity Policy
     ITS-0004 Faculty and Administration Network Connectivity Policy
      CALEA Communications Assistance for Law Enforcement Act - "The objective of CALEA implementation is to preserve law enforcement's ability to conduct lawfully-authorized electronic surveillance while preserving public safety, the public's right to privacy, and the telecommunications industry's competitiveness."  
     ITS-0033 Wireless Access Points Policy
     ITS-0036 Privileged Access Policy
     ITS-0038 Log Management Standard
     ITS-0039 Network Firewall Standard
     ITS-0041 Router and Switch Security Standard
  •  

    Pre-Purchase Services

     Policy Number  Policy Title 
     ITS-0013 Billable Services
     ITS-0031 Donations of IT, AV or Telecomm Equipment Policy
  •  

    Telecomm Services

     Policy Number  Policy Title 
     ITS-0002 Cell Phone and PDA Support Policy
     ITS-0021 Password and Voicemail Code Reset Policy
     ITS-0027 Telecommunications Acquisition, Installation and Repair Policy 
    University Policy Cell Phone Usage Policy
      CALEA Communications Assistance for Law Enforcement Act - "The objective of CALEA implementation is to preserve law enforcement's ability to conduct lawfully-authorized electronic surveillance while preserving public safety, the public's right to privacy, and the telecommunications industry's competitiveness."  
      Telecommunications Act of 1996 - "The Telecommunications Act of 1996 has the potential to change the way we work, live and learn. It will affect telephone service -- local and long distance, cable programming and other video services, broadcast services and services provided to schools."  
  •  

    Web Services

     Policy Number  Policy Title 
     ITS-0005 Website Hosting Acceptable Use Policy

Security

  •  

    Phishing Scam Information

    Never give out a password!

    Beware fraudulent "phishing" scams

    In the world of email communications, "phishing" is the deceptive practice of masquerading as a trustworthy entity in order to acquire sensitive information such as user codes, passwords, Social Security numbers, credit card numbers, or any other information that can be used to compromise and abuse an account, and leave a user open to monetary theft and identity theft.

    Phishing perpetrators often forge customized letters on a domain basis — for instance, including "udmercy.edu" in the message — to make a user believe the request for information is legitimate. At Detroit Mercy, we occasionally see messages come into our email boxes pretending to be from the University's ITS Help Desk, Web Services or similar areas, indicating a need for account information to address a technical issue (e.g. account maintenance, exceeded email quota, system upgrade); all of these messages should be treated as complete and total fraud.

    Detroit Mercy will never ask!

    As administrators of the University's email system, the ITS department never has a need for a user's password. If someone is asking for it, always refuse to give it out. The request alone should be a hint that the communication is illegitimate.

    Tricked?

    Change the security information

    If a password was mistakenly given out, attempt to immediately sign into TitanConnect and click the "My Account" link to:

    • set a new password and
    • set new secret questions and answers.

    It is important to change the secret questions and answers, in addition to changing a password. If only a password is changed, a hacker could regain control of an account by using unchanged secret questions and answers.

    If unable to do this, contact the ITS Help Desk. It is the standard procedure of ITS to set up an in-person meeting to review the situation and provide some additional educational information to further prevent such a situation from reoccurring. For repeat offenders, ITS may temporarily or permanently suspend email privileges.

    Check banking information

    Because TitanConnect includes banking information — e.g. for direct deposit of paychecks or financial aid — immediately sign into TitanConnect and use the "TitanConnect Self Service" link to verify that bank account and routing numbers are still valid. Also, consider alerting banks associated with the compromised account.

    Please note that email is a privilege at Detroit Mercy and those who allow multiple cases of abuse with their account can lose this privilege.

    Further risks

    Within an integrated system such as Detroit Mercy's TitanConnect, there are other risks to consider. A perpetrator may use University login credentials to:

    • change bank information, redirecting a user's direct deposit refund or paycheck to their account
    • hijack all a user's contacts to send an offensive message impersonating the user
    • access and distribute online W2 forms
    • change all contact information
    • run up charges on a user's University account

    Never share passwords or other sensitive information with anyone!

  •  

    Video: Identifying Phishing Emails

  •  

    Security Quiz

  •  

    Social Media Recommendations

    The ITS department suggests extreme caution when using community sites (such as Facebook) or blogging sites (such as blogger). Some university's block access to social network sites; the University of Detroit Mercy does not.

    Since these sites are hosted by providers outside of the University of Detroit Mercy and are in no way affiliated with the University of Detroit Mercy, we are limited in our ability to provide assistance as issues arise. Any personal data shared may be easily stored and permanently archived by anyone with access to the information. The best we can offer students and parents is to contact the “postmaster” or “webmaster” of the site for technical issues and local law enforcement for criminal issues.

    For students entering the workforce, today’s media frequently reports about employers who screen popular community and blogging sites for any information or pictures of potential candidates. The nature of data from such sites may not publicly properly represent a student's abilities and may reduce his/her chances of employment.

    The ITS department also suggests when communicating by email with potential employers to utilize an email account with a name that reflects professionalism and not one that would discourage an employer. Clearly, firstname.lastname@company.com or the university email account is more appealing and professional to employers than party.animal@site.com.

    For more information on this topic, we strongly suggest web searching sites for related stories in making educated decision on surfing the internet and making choices to share information in this world-wide forum.

Back to Top