PROTECTIONOFINFORMATIONSYSTEMSFROMCOMPUTERVIRUSES.pdfVIP

Protection of Information Systems from Computer Viruses, Spyware and Malware Version 04.0 Appendix III, UPR IM01 (formerly Appendix III, UPR GEN/D/1) Effective: 1 September 2014 PROTECTION OF INFORMATION SYSTEMS FROM COMPUTER VIRUSES, SPYWARE AND MALWARE SUMMARY OF PRINCIPAL CHANGES General changes This document has been subject to the annual review process led by the Chief Information Officer and has been re-issued with amendments, effective 1 September 2014. Section 4.2 Refer to text (Amendments to version 03.0, Appendix III, UPR IM01 are shown in italics.) Structure 1 INTRODUCTION 2 DEFINITIONS 2.1 computer virus, spyware and malware 2.2 approved detection software 2.3 principal user 2.4 portable media 3 SCOPE 4 PROCEDURE 4.1 Heads of Strategic Business Units 4.2 Virus detection software 5 GENERAL REGULATIONS 5.1 Security updates 5.2 Computer viruses, spyware and malware 6 PROCEDURES FOR REPORTING THE PRESENCE OF A VIRUS, SPYWARE AND MALWARE 7 GUIDANCE 1 INTRODUCTION This document sets out the Universitys regulations and procedures for the protection of computer systems from computer viruses. It was originally approved by the Senior Executive Group with effect from 1 September 2001 and has been amended with effect from 1 September 2014 on the authority of the Secretary and Registrar. 2 DEFINITIONS For the purposes of this document (Appendix III, UPR IM01) the following definitions apply. 1 These definitions are additional to