Page Content

Northwestern University Information Technology (NUIT) provides all technology services to University entities, including but not limited to voice, data, video, and wireless networks and services; Internet, and academic and administrative systems. All University entities are required to use the centrally provided technology services. The acquisition of technology services outside of Central NUIT is not permitted without the prior approval of the Vice President for Information Technology.

If you feel that a specific policy is being violated, please report it.

To ensure that these policies remain current, they are under constant review. Suggestions, questions and concerns are welcome, and should be addressed to consultant@northwestern.edu.

---

Security

Policy: Appropriate Use Of Electronic Resources Appropriate Use Of Electronic Resources Policy: Data Encryption Information Security Policy and Standards: Data Encryption Policy: Disposal of Northwestern University Computers Disposal of Northwestern University Computers Policy: Hub/Repeater/Wireless Security Additional Concerns for Hub/Repeater/Wireless Security Policy: Firewall Policy Firewall Policy Policy: Merchant Card Processing Merchant Card Processing Policy Policy: NU Network Privacy Privacy within the Northwestern Network Policy: Secure Handling of Social Security Numbers Information Security Policy and Standards: Secure Handling of Social Security Numbers Policy: Reporting a Violation Reporting a Northwestern University Information Technology Policy Violation Policy: Using Network and Computing Resources Rights and Responsibilities for the Use of Central Network and Computing Resources at Northwestern University Policy: Server Certificate Policy Server Certificate Policy Policy: Usage of the NU SSL VPN Usage of the NU SSL VPN Policy: Technology Acquisition, Development, and Deployment Policy for Information Technology Acquisition, Development and Deployment Policy: Use and Copying of Computer Software Information Technology Policy: Use and Copying of Computer Software Policy: Use of Student Residence Networks Use of Student Residence Networks Policy: Virus and Spyware Removal for ResNet Policy on Virus and Spyware Removal for ResNet Policy: Wireless Networks Northwestern University Policy on Wireless Networks Guideline: Authentication Requirements Northwestern University User Authentication Requirements Guideline: Data File Security and Confidentiality Guidelines for Security and Confidentiality of Data Files Guideline: Desktop Security Recommendations Security Recommendations for Desktop Computers Guideline: Exchanging Institutional Data Protocol for Exchange and Shared Responsibility for Institutional Data Guideline: Guide to Securing Web Applications Guide to Securing Web Applications Guideline: Incident Response Protocol Incident Response Protocol Guideline: Internet Addiction Internet Addiction Guideline: Mobile Device Security Guidelines Mobile Device Security Guidelines Guideline: Non-Disclosure Agreements Guideline for Northwestern University's Non-Disclosure Agreements Guideline: Off-Site Data Storage Computing Services Guideline for Off-Site Data Protection Storage Guideline: Online Harassment Online Harassment Guideline: Online Services Acquisition, Authentication, and Security Requirements to Coordinate Acquisition, Authentication and Security for Online Services to the University Community Which Are Hosted Either On Campus or Off Campus Guideline: Project Planning Protocol Project Planning Protocol Guideline: Search Tools for Sensitive Data Guideline for Using Sensitive Data Search Tools Guideline: Secure Networked Devices Guide to Securing Networked Printers, Scanners, Copiers, and Faxes Guideline: Sensitive Data in Contracts Contract Language for the Secure Handling of Sensitive Data Guideline: Server Security Server Security Requirements and References Guideline: System Administration System Administration Guides Guideline: Windows 2000/XP Setup Northwestern University Windows 2000 / XP Setup Guideline: Working with the Protocol Document Working with the Protocol Document

Network

Policy: Appropriate Use Of Electronic Resources Appropriate Use Of Electronic Resources Policy: Bulk E-mail Approvals Bulk E-mail Approval Policies and Procedures Policy: Cable, Satellite, and IP Delivered Television Services Northwestern University Policy on Cable, Satellite, and IP Delivered Television Services Policy: Computer and Networking Purchases Guidelines for Computer and Networking Purchases at Northwestern University Policy: CourseLife Course Management System Administration: CourseLife Policy: Data Access Data Access Policy Policy: Data Encryption Information Security Policy and Standards: Data Encryption Policy: E-mail Management Management of Received E-mail on Central Service Hosts Policy: Hub/Repeater/Wireless Security Additional Concerns for Hub/Repeater/Wireless Security Policy: Merchant Card Processing Merchant Card Processing Policy Policy: NetID and Network Privileges Who may have a Northwestern NetID and network privileges Policy: Non-University Owned Building Infrastructure Northwestern University Non-University Owned Building Infrastructure Policy Policy: NU Network Privacy Privacy within the Northwestern Network Policy: Reporting a Violation Reporting a Northwestern University Information Technology Policy Violation Policy: Using Network and Computing Resources Rights and Responsibilities for the Use of Central Network and Computing Resources at Northwestern University Policy: Rooftop Leases Rooftop Lease Policy Policy: Server Certificate Policy Server Certificate Policy Policy: Satellite Delivered Services Northwestern University Policy on Satellite Delivered Services Policy: Software Authentication Requirements Authentication Requirements for University Software Applications Policy: Technology Acquisition, Development, and Deployment Policy for Information Technology Acquisition, Development and Deployment Policy: Unapproved Network Extensions Policy and Enforcement Plan for Unapproved Campus Network Extensions Policy: Usage of the NU SSL VPN Usage of the NU SSL VPN Policy: Use of Computers, Systems, and Networks Use of Computers, Systems, and Networks Policy: Use of Multiple Appearance Directory Numbers (MADNs) Use of Multiple Appearance Directory Numbers (MADNs) Policy: Using Listserv Electronic Mail Distribution Through LISTSERV Policy: Virus and Spyware Removal for ResNet Policy on Virus and Spyware Removal for ResNet Policy: Wireless Networks Northwestern University Policy on Wireless Networks Guideline: Data File Security and Confidentiality Guidelines for Security and Confidentiality of Data Files Guideline: Exchanging Institutional Data Protocol for Exchange and Shared Responsibility for Institutional Data Guideline: Guide to Securing Web Applications Guide to Securing Web Applications Guideline: Incident Response Protocol Incident Response Protocol Guideline: IT Resource Management Strategies Information Technology Resource Management Strategies Guideline: Off-Site Data Storage Computing Services Guideline for Off-Site Data Protection Storage Guideline: Online Services Acquisition, Authentication, and Security Requirements to Coordinate Acquisition, Authentication and Security for Online Services to the University Community Which Are Hosted Either On Campus or Off Campus Guideline: Project Planning Protocol Project Planning Protocol Guideline: Secure Networked Devices Guide to Securing Networked Printers, Scanners, Copiers, and Faxes Guideline: Sensitive Data in Contracts Contract Language for the Secure Handling of Sensitive Data Guideline: System Administration System Administration Guides Guideline: Working with the Protocol Document Working with the Protocol Document Practice: Admin Application Hosting - Data Center Practice on Locating Administrative Applications or Equipment In Central Data Centers Practice: Central Web Server Procedure Central Web Server Procedure Practice: Research Application Hosting - Data Center Practice on Locating Research Applications or Equipment in Central Data Centers

Hardware

Policy: Appropriate Use Of Electronic Resources Appropriate Use Of Electronic Resources Policy: Cable, Satellite, and IP Delivered Television Services Northwestern University Policy on Cable, Satellite, and IP Delivered Television Services Policy: Disposal of Northwestern University Computers Disposal of Northwestern University Computers Policy: Computer and Networking Purchases Guidelines for Computer and Networking Purchases at Northwestern University Policy: Hub/Repeater/Wireless Security Additional Concerns for Hub/Repeater/Wireless Security : Policy: Reporting a Violation Reporting a Northwestern University Information Technology Policy Violation Policy: Rooftop Leases Rooftop Lease Policy Policy: Technology Acquisition, Development, and Deployment Policy for Information Technology Acquisition, Development and Deployment Policy: Unapproved Network Extensions Policy and Enforcement Plan for Unapproved Campus Network Extensions Guideline: Data File Security and Confidentiality Guidelines for Security and Confidentiality of Data Files Guideline: Desktop Security Recommendations Security Recommendations for Desktop Computers Guideline: Energy Efficient Computing Energy Efficient Computing at Northwestern Guideline: Exchanging Institutional Data Protocol for Exchange and Shared Responsibility for Institutional Data Guideline: Incident Response Protocol Incident Response Protocol Guideline: Project Planning Protocol Project Planning Protocol Guideline: Search Tools for Sensitive Data Guideline for Using Sensitive Data Search Tools Guideline: Server Security Server Security Requirements and References Guideline: System Administration System Administration Guides Guideline: Windows 2000/XP Setup Northwestern University Windows 2000 / XP Setup Guideline: Working with the Protocol Document Working with the Protocol Document Practice: Admin Application Hosting - Data Center Practice on Locating Administrative Applications or Equipment In Central Data Centers Practice: Research Application Hosting - Data Center Practice on Locating Research Applications or Equipment in Central Data Centers

Software

Policy: Appropriate Use Of Electronic Resources Appropriate Use Of Electronic Resources Policy: Bulk E-mail Approvals Bulk E-mail Approval Policies and Procedures Policy: Computer and Networking Purchases Guidelines for Computer and Networking Purchases at Northwestern University Policy: CourseLife Course Management System Administration: CourseLife Policy: Reporting a Violation Reporting a Northwestern University Information Technology Policy Violation Policy: Technology Acquisition, Development, and Deployment Policy for Information Technology Acquisition, Development and Deployment Policy: Use and Copying of Computer Software Information Technology Policy: Use and Copying of Computer Software Policy: Using Listserv Electronic Mail Distribution Through LISTSERV Guideline: Authentication Requirements Northwestern University User Authentication Requirements Guideline: Data File Security and Confidentiality Guidelines for Security and Confidentiality of Data Files Guideline: Exchanging Institutional Data Protocol for Exchange and Shared Responsibility for Institutional Data Guideline: Incident Response Protocol Incident Response Protocol Guideline: IT Resource Management Strategies Information Technology Resource Management Strategies Guideline: Project Planning Protocol Project Planning Protocol Guideline: Search Tools for Sensitive Data Guideline for Using Sensitive Data Search Tools Guideline: Sensitive Data in Contracts Contract Language for the Secure Handling of Sensitive Data Guideline: Windows 2000/XP Setup Northwestern University Windows 2000 / XP Setup Guideline: Working with the Protocol Document Working with the Protocol Document

Resnet

Policy: Appropriate Use Of Electronic Resources Appropriate Use Of Electronic Resources Policy: Cable, Satellite, and IP Delivered Television Services Northwestern University Policy on Cable, Satellite, and IP Delivered Television Services Policy: Computer and Networking Purchases Guidelines for Computer and Networking Purchases at Northwestern University Policy: Hub/Repeater/Wireless Security Additional Concerns for Hub/Repeater/Wireless Security Policy: NU Network Privacy Privacy within the Northwestern Network Policy: Reporting a Violation Reporting a Northwestern University Information Technology Policy Violation Policy: Using Network and Computing Resources Rights and Responsibilities for the Use of Central Network and Computing Resources at Northwestern University Policy: Unapproved Network Extensions Policy and Enforcement Plan for Unapproved Campus Network Extensions Policy: Use and Copying of Computer Software Information Technology Policy: Use and Copying of Computer Software Policy: Use of Computers, Systems, and Networks Use of Computers, Systems, and Networks Policy: Use of Student Residence Networks Use of Student Residence Networks Policy: Virus and Spyware Removal for ResNet Policy on Virus and Spyware Removal for ResNet Policy: Wireless Networks Northwestern University Policy on Wireless Networks Guideline: Desktop Security Recommendations Security Recommendations for Desktop Computers Guideline: Energy Efficient Computing Energy Efficient Computing at Northwestern Guideline: Incident Response Protocol Incident Response Protocol Guideline: System Administration System Administration Guides Guideline: Windows 2000/XP Setup Northwestern University Windows 2000 / XP Setup

E-mail

Policy: Appropriate Use Of Electronic Resources Appropriate Use Of Electronic Resources Policy: Bulk E-mail Approvals Bulk E-mail Approval Policies and Procedures Policy: E-mail Management Management of Received E-mail on Central Service Hosts Policy: NetID and Network Privileges Who may have a Northwestern NetID and network privileges Policy: Reporting a Violation Reporting a Northwestern University Information Technology Policy Violation Policy: Using Listserv Electronic Mail Distribution Through LISTSERV Guideline: Incident Response Protocol Incident Response Protocol

Vendors

Policy: Cable, Satellite, and IP Delivered Television Services Northwestern University Policy on Cable, Satellite, and IP Delivered Television Services Policy: Computer and Networking Purchases Guidelines for Computer and Networking Purchases at Northwestern University Policy: Hub/Repeater/Wireless Security Additional Concerns for Hub/Repeater/Wireless Security Policy: Merchant Card Processing Merchant Card Processing Policy Policy: Non-University Owned Building Infrastructure Northwestern University Non-University Owned Building Infrastructure Policy Policy: Reporting a Violation Reporting a Northwestern University Information Technology Policy Violation Policy: Rooftop Leases Rooftop Lease Policy Policy: Satellite Delivered Services Northwestern University Policy on Satellite Delivered Services Policy: Secure Handling of Social Security Numbers Information Security Policy and Standards: Secure Handling of Social Security Numbers Policy: Technology Acquisition, Development, and Deployment Policy for Information Technology Acquisition, Development and Deployment Policy: Use and Copying of Computer Software Information Technology Policy: Use and Copying of Computer Software Guideline: Authentication Requirements Northwestern University User Authentication Requirements Guideline: Exchanging Institutional Data Protocol for Exchange and Shared Responsibility for Institutional Data Guideline: Incident Response Protocol Incident Response Protocol Guideline: Non-Disclosure Agreements Guideline for Northwestern University's Non-Disclosure Agreements Guideline: Off-Site Data Storage Computing Services Guideline for Off-Site Data Protection Storage Guideline: Online Services Acquisition, Authentication, and Security Requirements to Coordinate Acquisition, Authentication and Security for Online Services to the University Community Which Are Hosted Either On Campus or Off Campus Guideline: Project Planning Protocol Project Planning Protocol Guideline: Sensitive Data in Contracts Contract Language for the Secure Handling of Sensitive Data Guideline: Working with the Protocol Document Working with the Protocol Document