Antivirus Protection Policy
For Students, Faculty, Staff, Guests, Alumni
The purpose of this policy is to ensure antivirus software is installed to detect, prevent, and remove malicious software from the University’s IT Resources.
This IT Policy, and all policies referenced herein, shall apply to all members of the University community, including faculty, students, administrative officials, staff, alumni, authorized guests, delegates, and independent contractors (the “User(s)” or “you”) who use, access, or otherwise employ, locally or remotely, the University’s IT Resources, whether individually controlled, shared, stand-alone, or networked.
- All University IT Resources must maintain up-to-date antivirus software.
- The University provides antivirus software. To obtain a copy:
- Uninstalling or disabling the antivirus product for any reason is prohibited.
- Individuals who use non-University-owned or managed antivirus solutions and choose to use other solutions should refer to the documentation provided with the software.
- Users are responsible for updating the software to the most current version and configuring it to update virus definitions at least daily automatically.
IT Resources include computing, networking, communications, application, and telecommunications systems, infrastructure, hardware, software, data, databases, personnel, procedures, physical facilities, cloud-based vendors, Software as a Service (SaaS) vendors, and related materials and services.
|Responsible Person||Senior Director of IT Security and Assurance|
|Approval Date||January 8, 2018|
|1.0.1||01/15/2016||Supersedes version from February 1, 2011. Minor changes for posting on new policy pages on the website.|
|2.0||01/08/2018||Template change, updated disclaimer statement, updated scope, added IT Resources definition, edits to language using IT Resources, edits to policy statement removing references to specific software.|
|2.1||06/02/2020||Updated policy statement|
|2.2||07/01/2022||Updated policy statement|
Policy Disclaimer Statement
Deviations from policies, procedures, or guidelines published and approved by Information Security and Assurance (ISA) may only be done cooperatively between ISA and the requesting entity with sufficient time to allow for appropriate risk analysis, documentation, and possible presentation to authorized University representatives. Failure to adhere to ISA written policies may be met with University sanctions.