Attachment_H-1_Rules_Of_Behavior_for_United_States_Mint_IT_Systems_Users.pdf

United States Mint IT System User Rules Of Behavior

• Each computer user is responsible for activities performed under his or her assigned UserID.

• Users must take positive steps to see that the information system resources with which they have been entrusted are used properly, as directed by Federal law, regulation and United States Mint policy.

• Users must take positive steps to protect United States Mint equipment, software and data from loss, theft, or unauthorized use.

• Users must not attempt to circumvent any United States Mint security control mechanisms (e.g., firewalls, virus protection)

• Users must not alter, copy, search, browse or delete any United States Mint data or information except in accordance with their assigned job responsibilities.

• Users must not reveal government information produced by United States Mint systems, except as authorized or required by their assigned job responsibilities.

• Users must complete annual information security awareness training as required by United States Mint policy.

• Dial-in access to the United States Mint is prohibited, unless specifically authorized.

• Users must report any known or suspected breaches of information security to the United States Mint Police and the Office of Information Security (or local field site IT office) immediately after discovery of the occurrence.

• Users are not permitted to load any software onto a United States Mint workstation or server. Users will obtain administrative approval if special needs are encountered and forward their request to OCIO Help Desk or field site IT office.

• Users will not use United States Mint devices to make illegal copies of software or other copyrighted material.

• Users should take positive steps to prevent unauthorized persons from accessing Mint workstations. Unknown and unidentified persons attempting access should be reported to United States Mint Police.

• When leaving an active United States Mint workstation unattended, users will lock their display or use the system’s password protected screensaver to secure the workstation from unauthorized use. Users should also power down non-shared workstations at the end of the day, for security and conservation.

• Users must protect UserIDs and passwords from improper disclosure, and should take the following precautions to protect their UserIDs and passwords from improper disclosure:

o Do not reveal your UserID and password to others.

ATTACHMENT H-1 - RULES OF BEHAVIOR FOR UNITED STATES MINT IT SYSTM USERS

o If your password is compromised, immediately select a new password and change it on all covered systems and devices.

o Do not use another person’s UserID and password to access Mint information systems.

o Do not write your password down or store it in a portable electronic device (PED) o Change your password at least every 45 days.

• Users will not use personally owned computers, laptops, PEDs, and other data devices to access, process or store Mint information identified as sensitive but unclassified (SBU) without authorization from the Office of Information Security.

• Users of United States Mint e-mail and Internet access will be prudent with personal use of these government resources and refrain from sending and forwarding illegal, inappropriate, or offensive messages, including (but not limited to) sexually explicit, vulgar, abusive, defamatory, virus hoax or chain-letter messages.

• Users will not intentionally access Web sites containing illegal, inappropriate, or offensive material, including (but not limited to) sexually explicit material, hacker tools, and gambling devices, unless such access is authorized in accordance with his or her official responsibilities.

Violation of these rules can be grounds for administrative and/or disciplinary action by the United States Mint, which may result in actions up to and including removal from federal service and prosecution under Federal law.

I hereby acknowledge that I have read the above IT System User Rules of Behavior for the United States Mint.

(Printed Name) (Signature) (Date)

ATTACHMENT H-1 - RULES OF BEHAVIOR FOR UNITED STATES MINT IT SYSTM USERS