Policy Number 7.302
Supersedes Policy Dated: October 3, 2001
Effective Date: September 23, 2004
Review Date: June 3, 2008
Title of Policy: Antivirus Policy
Purpose of Policy: To prevent infection of University computers and computer systems by computer viruses and other malicious code. This policy is intended to prevent major and widespread damage to user applications, files, and hardware.
Person(s) with Primary Responsibility:
Director of IT Security
Approved:
Chief Information Officer
Antivirus Policy:
All Windows and Macintosh computers (clients and servers) connected to the East Carolina University computer network (herein referred to as “the network”) or networked resources shall have ITCS-supported antivirus software (preferably the most current version) correctly installed, configured, activated, and updated with the latest version of virus definitions before or immediately upon connecting to the network. If deemed necessary to prevent viral propagation to other networked devices or detrimental effects to the network, computers infected with viruses or other forms of malicious code (herein collectively referred to as “malware”) shall be disconnected from the network until the infection has been removed. Directions for procurement, installation, configuration, and use of antivirus software are located at http://www.ecu.edu/cs-itcs/itsecurity/customcf/computersecurity.pdf.
When an enterprise-wide virus attack is in progress, ITCS shall notify the campus computing community via the best available method and all files on all hard drives should be scanned immediately using the newest virus definitions available.
Other operating systems or computing platforms shall have comparable protection, if available. In the event that no antivirus protection is available for a particular operating system or platform, anyone using or accessing these unprotected systems shall apply all prudent security practices to prevent infection, including the application of all security patches as soon as they become available. When antivirus software becomes available for an operating system or platform previously lacking antivirus software, it shall be installed on all applicable devices connected to the network.
Any exceptions to this policy must be explicitly approved by the ITCS Information Technology Security Department.
