Policies & Security
Policy Number Policy Title ITS-0006 Valid University Identification Card Required for Laboratory Use Policy ITS-0007 Academic Computing Laboratory Reservation Policy ITS-0012 Academic Computing Laboratory Courseware Installation and Removal Policy ITS-0025 ITS Academic Computing Laboratory Rules and Policy
Acceptable Use and Security
Policy Number Policy Title ITS-0008 Account Privilege Policy ITS-0021 Password and Voicemail Code Reset Policy ITS-0026 Mandatory Password Change Policy ITS-0028 Acceptable Use and Security Policy Merit Acceptable Use Policy - Applicable to all users of the University of Detroit Mercy network ITS-0034 Incident Response Plan ITS-0035 Access Control Policy ITS-0040 Password Standard Policy ITS-0042 Antivirus Policy ITS-0043 Encryption Policy
Advertising Events Online
Use of technology to advertise University events is often the most convenient and direct way of reaching the Detroit Mercy community. Many areas within the University host events and too much advertising of all these events can be overwhelming for any individual. At many universities, advertising of events is centrally controlled but Detroit Mercy has yet to take this step. All use of technology for advertising have rules and restrictions that are enforced. Before attempting to advertise, please become familiar with the rules and restrictions.
Advertising via Email Listservs
The ITS department manages a number of specialized listservs to provide a convenient way to reach various groups of the Detroit Mercy community very easily. Members of the community are automatically enrolled based upon their various status levels within the TitanConnect system. A guideline on when and how to use the lists was created by the Shared Governance IT Team and adopted as policy by the ITS department. Senders who wish to use these listservs should review the guidelines in their entirety before attempting to send a message. All messages send (except those to the faculty listserv) are reviewed by an individual during normal business hours before being released for distribution. The guidelines are available here.
Advertising via Detroit Mercy TitanTV Channels 97 or 98
The ITS department manages the closed-circuit cable TV environment that provides service to the 500+ residence rooms as well as various locations across the McNichols campus. Two of the channels on the system, 97 and 98, are dedicated to Detroit Mercy content. Channel 97 provides video content and channel 98 is the standard public access content station that provides a sequence of slides of events. Promotional information for University events may be requested for play on either channel by submitting the request through the ITS Help Desk system (http://hd.udmercy.edu) and selecting the appropriate category. Video content will need to be provided in an MPG or MP4 format.
Advertising via TitanConnect Major Announcements Channel
As users log into the TitanConnect portal each day, a Major Announcements channel is presented and generally contains information pertaining to major events taking place on campus. A custom message is displayed to students and a different custom message is displayed to employees. When appropriate, the same message is displayed to both groups. To request the posting of a message in the TitanConnect Major Announcements channel, please make that request by email to firstname.lastname@example.org.
Advertising via Campus Connection
Authored by the Marketing & Public Affairs department, Campus Connection is an electronic newsletter that contains interesting information of University events published at a varying schedule (generally once a week during Term I and II and once a month during the summer). To submit information for Campus Connection, please go here.
Advertising via the Detroit Mercy Events Calendar
Advertising via www.udmercy.edu
Requests for advertisement on the University's primary web server should be submitted to the Marketing & Public Affairs department.
Advertising via Social Media (Facebook, Twitter, etc.)
Requests for advertisement on the University's official Facebook and Twitter accounts should be submitted to the Marketing & Public Affairs department.
Policy Number Policy Title ITS-0022 Audio-Visual Reservation Policy
Policy Number Policy Title ITS-0009 Email Account Naming Policy ITS-0010 Email Account Removal Policy ITS-0011 Email Backup and Restore Policy ITS-0019 Guidelines for Mass Electronic Communications ITS-0020 All@listserver.udmercy.edu Policy ITS-0024 Student Email Policy (President's Council) ITS-0029 Email Client Support Policy CanSPAM - "An act to regulate interstate commerce by imposing limitations and penalties on the transmission of unsolicited commercial electronic mail via the internet."
Licensing and Copyright
Policy Number Policy Title ITS-0014 Unauthorized Distribution of Copyrighted Materials Policy ITS-0017 Anti-Piracy Policy Teach Act of 2002 - "The TEACH Act expands the scope of educators' rights to perform and display works and to make the copies integral to such performances and displays for digital distance education, making the rights closer to those we have in face-to-face teaching." The Digital Millennium Copyright Act of 1998 (DCMA) - "The Digital Millennium Copyright Act (DMCA) was signed into law by President Clinton on October 28, 1998. The legislation implements two 1996 World Intellectual Property Organization (WIPO) treaties: the WIPO Copyright Treaty and the WIPO Performances and Phonograms Treaty. The DMCA also addresses a number of other significant copyright-related issues." Higher Education Act - Annual Illegal Downloading Disclosure - The HEOA primarily addresses obstacles that make it difficult for qualified students to obtain a college education, but it also includes specific statements requiring colleges and universities to comply with digital copyright laws.
Policy Number Policy Title ITS-0003 Resident and Non-Resident Student Network Connectivity Policy ITS-0004 Faculty and Administration Network Connectivity Policy CALEA Communications Assistance for Law Enforcement Act - "The objective of CALEA implementation is to preserve law enforcement's ability to conduct lawfully-authorized electronic surveillance while preserving public safety, the public's right to privacy, and the telecommunications industry's competitiveness." ITS-0033 Wireless Access Points Policy ITS-0036 Privileged Access Policy ITS-0038 Log Management Standard ITS-0039 Network Firewall Standard ITS-0041 Router and Switch Security Standard
Policy Number Policy Title ITS-0013 Billable Services ITS-0031 Donations of IT, AV or Telecomm Equipment Policy
Policy Number Policy Title ITS-0002 Cell Phone and PDA Support Policy ITS-0021 Password and Voicemail Code Reset Policy ITS-0027 Telecommunications Acquisition, Installation and Repair Policy University Policy Cell Phone Usage Policy CALEA Communications Assistance for Law Enforcement Act - "The objective of CALEA implementation is to preserve law enforcement's ability to conduct lawfully-authorized electronic surveillance while preserving public safety, the public's right to privacy, and the telecommunications industry's competitiveness." Telecommunications Act of 1996 - "The Telecommunications Act of 1996 has the potential to change the way we work, live and learn. It will affect telephone service -- local and long distance, cable programming and other video services, broadcast services and services provided to schools."
Policy Number Policy Title ITS-0005 Website Hosting Acceptable Use Policy
Phishing Scam Information
Never give out a password!
Beware fraudulent "phishing" scams
In the world of email communications, "phishing" is the deceptive practice of masquerading as a trustworthy entity in order to acquire sensitive information such as user codes, passwords, Social Security numbers, credit card numbers, or any other information that can be used to compromise and abuse an account, and leave a user open to monetary theft and identity theft.
Phishing perpetrators often forge customized letters on a domain basis — for instance, including "udmercy.edu" in the message — to make a user believe the request for information is legitimate. At Detroit Mercy, we occasionally see messages come into our email boxes pretending to be from the University's ITS Help Desk, Web Services or similar areas, indicating a need for account information to address a technical issue (e.g. account maintenance, exceeded email quota, system upgrade); all of these messages should be treated as complete and total fraud.
Detroit Mercy will never ask!
As administrators of the University's email system, the ITS department never has a need for a user's password. If someone is asking for it, always refuse to give it out. The request alone should be a hint that the communication is illegitimate.
Change the security information
If a password was mistakenly given out, attempt to immediately sign into TitanConnect and click the "My Account" link to:
- set a new password and
- set new secret questions and answers.
It is important to change the secret questions and answers, in addition to changing a password. If only a password is changed, a hacker could regain control of an account by using unchanged secret questions and answers.
If unable to do this, contact the ITS Help Desk. It is the standard procedure of ITS to set up an in-person meeting to review the situation and provide some additional educational information to further prevent such a situation from reoccurring. For repeat offenders, ITS may temporarily or permanently suspend email privileges.
Check banking information
Because TitanConnect includes banking information — e.g. for direct deposit of paychecks or financial aid — immediately sign into TitanConnect and use the "TitanConnect Self Service" link to verify that bank account and routing numbers are still valid. Also, consider alerting banks associated with the compromised account.
Please note that email is a privilege at Detroit Mercy and those who allow multiple cases of abuse with their account can lose this privilege.
Within an integrated system such as Detroit Mercy's TitanConnect, there are other risks to consider. A perpetrator may use University login credentials to:
- change bank information, redirecting a user's direct deposit refund or paycheck to their account
- hijack all a user's contacts to send an offensive message impersonating the user
- access and distribute online W2 forms
- change all contact information
- run up charges on a user's University account
Never share passwords or other sensitive information with anyone!
Video: Identifying Phishing Emails
Social Media Recommendations
The ITS department suggests extreme caution when using community sites (such as Facebook) or blogging sites (such as blogger). Some university's block access to social network sites; the University of Detroit Mercy does not.
Since these sites are hosted by providers outside of the University of Detroit Mercy and are in no way affiliated with the University of Detroit Mercy, we are limited in our ability to provide assistance as issues arise. Any personal data shared may be easily stored and permanently archived by anyone with access to the information. The best we can offer students and parents is to contact the “postmaster” or “webmaster” of the site for technical issues and local law enforcement for criminal issues.
For students entering the workforce, today’s media frequently reports about employers who screen popular community and blogging sites for any information or pictures of potential candidates. The nature of data from such sites may not publicly properly represent a student's abilities and may reduce his/her chances of employment.
The ITS department also suggests when communicating by email with potential employers to utilize an email account with a name that reflects professionalism and not one that would discourage an employer. Clearly, email@example.com or the university email account is more appealing and professional to employers than firstname.lastname@example.org.
For more information on this topic, we strongly suggest web searching sites for related stories in making educated decision on surfing the internet and making choices to share information in this world-wide forum.