Attachment 12 DHA IT Privileged User Agreement.docx

Attachment 12 DHA IT Privileged User Agreement & Acknowledgement of Responsibilities

Date: Click here to enter a date.

1. I understand there are two DoD Information Systems (ISs), classified (SIPRNET) and unclassified (NIPRNET), and that I have the necessary clearance for privileged access to DHA [specify which IS the privileges are for]. I will not introduce or process data or software for the IS that I have not been specifically authorized to handle.

2. I understand the need to protect all passwords and other authenticators at the highest level of data they secure. I will not share any password(s), account(s), or other authenticators with other coworkers or other personnel not authorized to access the [IS name]. As a privileged user, I understand the need to protect the root password and/or authenticators at the highest level of data it secures. I will NOT share the root password and/or authenticators with coworkers who are not authorized [IS name] access.

3. I understand that I am responsible for all actions taken under my account(s), root, or otherwise. I will not attempt to “hack” the network or any connected ISs or gain access to data to which I do not have authorized access.

4. I understand my responsibility to appropriately protect and label all output generated under my account, including printed materials, magnetic tapes, floppy disks, and downloaded hard disk files.

5. I will immediately report any indication of computer network intrusion, unexplained degradation or interruption of network services, or the actual or possible compromise of data or file access controls to the appropriate [IS name]. Information System Security Manager (ISSM) or Information System Security Officer (ISSO). I will NOT install, modify, or remove any hardware or software (e.g., freeware/shareware and security tools) without written permission and approval from the [IS name] ISSM or ISSO.

6. I will not install any unauthorized software (e.g., games, entertainment software) or hardware ( e.g., sniffers).

7. I will not add/remove any users’ names to the Domain Administrators, Local Administrator, or Power Users group without the prior approval and direction of the [IS name] ISSM or ISSO.

8. I will not introduce any unauthorized code, Trojan horse programs, malicious code, or viruses into the [IS name] local area networks.

9. I understand that I am prohibited from the following while using DoD IT:

a. Introducing classified information into a NIPRNET environment.

b. Accessing, storing, processing, displaying, distributing, transmitting, or viewing material that is abusive, harassing, defamatory, vulgar, pornographic, profane, or racist; that promotes hate crimes, or is subversive or objectionable by nature, including material encouraging criminal activity, or violation of local, state, federal, national, or international law.

c.Storing, accessing, processing, or distributing Classified, Proprietary, Controlled Unclassified Information, For Official Use Only, or Privacy Act protected information in violation of established security and information release policies.