Accounts

Policy Statement

This policy provides direction in creating and maintaining accounts on computerized information systems operated by or on behalf of Adelphi University.

Reason for Policy

Accounts provide users with access to computer resources and data. In order to ensure authorized user access and to prevent unauthorized access to information systems, this policy guides the creation and use of accounts.

Who Is Governed by this Policy

All end-user and application management accounts on computerized information systems operated by or on behalf of Adelphi University.

Policy

1. End-user and application management account access privileges may only be granted, revoked or modified after documented approval by the Data Owner has been obtained.
2. End-user and application management account access privileges must be reviewed and re-approved by the Data Owner on a regular basis.
3. End-user and application management accounts may only be removed when:
   1. documented approval by the system owner was received, or
   2. an employee termination notice was received from Human Resources, or
   3. after review, the account was not re-approved in a timely fashion

Enforcement

This policy will be enforced by the Office of Information Technology. Violation of this policy may lead to revocation of access to systems.

Deviation from policy

Deviation from this policy may be granted by the Information Security Officer.

Definitions

Data Owner: A role or person who is able and authorized to make informed decisions regarding a particular class of information.

Forms

This policy does not have forms associated with it at this time. Upon periodic policy review this area will be evaluated to determine if additional information is needed to supplement the policy.

Related Information

This policy does not have related information at this time. Upon periodic policy review this area will be evaluated to determine if additional information is needed to supplement the policy.

Document History

• Last Reviewed Date: March 30, 2023
• Last Revised Date: September 01, 2017
• Policy Origination Date: Not available

Who Approved This Policy

Carol Ann Boyle, Chief Information Officer