1. Faculty, staff, students, and patrons at the college or System Office should immediately report violations of information security policies to the local Chief Information Officer (CIO).
  2. If the accused is an employee, the CIO will collect the facts of the case and identify the offender. If, in the opinion of the CIO, the alleged violation is of a serious nature, the CIO will notify the offender’s supervisor. The supervisor, in conjunction with the College or System Human Resources Office and the CIO, will determine the appropriate disciplinary action. Disciplinary actions may include but are not limited to:
    • Temporary restriction of the violator’s computing resource access for a fixed period of time, generally not more than six months.
    • Restitution for damages, materials consumed, machine time, etc. on an actual cost basis. Such restitution may include the cost associated with determining the case facts.
    • Disciplinary action for faculty and classified staff in accordance with the guidelines established in the State Standards of Conduct Policy.
  3. In the event that a student is the offender, the accuser should notify the Vice President of Instruction. The VP, in cooperation with the CIO, will determine the appropriate disciplinary actions which may include but are not limited to:
    • Temporary restriction of the violator’s computing resource access for a fixed period of time, generally not more than six months.
    • Restitution for damages, materials consumed, machine time, etc. on an actual cost basis. Such restitution may include the cost associated with determining the case facts.
    • Disciplinary action for student offenders shall be in accordance with the college student standards of conduct.
  4. The College President or designee will report any violations of state and federal law to the appropriate authorities.
  5. All formal disciplinary actions taken under this policy are subject to the Commonwealth’s personnel guidelines and the accused may pursue findings through the appropriate grievance procedure.