1.16 - Computer Administrative Privileges Policy

Purpose

To provide a secure and stable computing environment through the practice of granting User privilege standards on College computers. Information Services (IS) is committed to provide a secure and stable computing environment to facilitate teaching and learning. As such, IS has adopted a practice of granting User privileges as “Standard” on college computers. Granting User privileges ensures KCKCC follows computing security best practices from leading cyber security advisors. These practices also reduce software/freeware downloads infected with malware/spyware and protect college data.

In addition, limited access for Users reduces the risk of widespread computer infection and reduces the risk of compromised data, which, if breached, has the potential to have serious negative consequences for the institution. Appropriate User privileges promotes greater employee productivity through use of computers not affected by spyware/malware and allows technical staff to work in a more proactive than reactive mode. Appropriate User privileges limits software installation on college-owned machines to appropriately reviewed and licensed software.

Definitions

Principle of Least Privilege: The idea that at any user, program, or process should have the minimum privileges necessary to perform its function.

Standard: A user account with limited privileges that will be used for general tasks such as reading email and surfing the Web.

Policy Statement

By default, all members of the college community, using college-owned computers, are granted the “Standard” User access level on their individual workstations. All College employees should use the least set of privileges necessary to operate their computers. Adhering to The Principle of Least Privilege (POLP), the College limits potential damage that can result from a poorly written application, viruses, malware, an accident or error. IS staff will provide local computer “Administrator” privileges when it has been determined that there is a valid business case. Administrative privilege requests must be submitted to IS via Helpdesk ticket. These requests will be reviewed on a case-by-case basis.