Re:

["Scholz, Greg" <gscholz () KEENE EDU>]

The first question should probably be, "should this be an IT policy or a
campus legal policy?" We do reference something similar in our CNUP but
it is not for protecting business process but rather IT process.

Unacceptable Uses...
" Attempt to alter or obscure your identity or your computer's identity,
including but not limited to IP Address and email address, while
communicating on any network"

> From http://www.keene.edu/policy/cnup.cfm

If someone is causing a problem with a business process there should be
a business rule regarding it.  Whether it happens on the phone, postal
mail, email, inter-office memo, etc, etc it is fraud.

My suggestion is to find out if there is a campus policy for someone
misrepresenting themselves and if it explicitly states via phone, mail,
etc then get all technologies wiped from the policy and have it read
"via any communications."

If you still choose to take the IT perspective, just write up something
that forbids falsifying identity when using your resources regardless of
intent. 

_________________________
Thank you,
Gregory R. Scholz
Lead Network Engineer
Information Technology Group
Keene State College
(603)358-2070


-----Original Message-----
From: Theresa Semmens [mailto:theresa.semmens () NDSU EDU] 
Sent: Tuesday, June 14, 2005 4:46 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY]

We're looking at the possibility of providing in a policy that it would
be
an acceptable use violation to misrepresent who one is when
communicating
with a university official; particularly as it applies to employees.

This is to get at the situation where someone uses an alias to
communicate
on a work related matter to someone else.

I'm wondering if any of you have such a restriction in place, or could
point
me to a policy with such a restriction. Any advice or suggestions would
be
helpful. 

Best regards,

Theresa Semmens, CISA
IT Security Officer
North Dakota State University
IACC 210C
Ph: 701-231-5870
E-mail: theresa.semmens () ndsu edu
 
"If you believe you cannot do something, it makes you incapable of doing
it.
But when you believe you can, you acquire the ability to do it, even if
you
did not have the ability in the beginning."       Mahatma Gandhi