Guideline for Restricting Software

["Edwards, Francis" <FEdwards () MC CC MD US>]

Does anyone have a guideline or other "policy" document restricting the
installation or use of specific software on institutional computers?
I'm talking about the nasty stuff like KaZaA, vulnerability scanners,
password crackers, etc. that have limited justification on a faculty or
staff workstation. 
 
We're crafting something to document our need to restrict such products,
permit use when justified / authorized, and our authority to have them
removed.  

It always helps seeing what others have done when crafting the language.
And it sure helps in making the case if others already have something
similar in place.


Thanks,
Francis L. Edwards, II  CISSP CCP
Manager, IT Security
Montgomery College
Rockville, MD 20855-2759



**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.