Sample Only
City of Seattle
Memorandum Regarding Internet Acceptable Use Policy and Virus Protection Policy
Date: September XX, 1995
TO: All Internet Users
FROM: Ken Nakatsu
RE: Internet Acceptable Use Policy and Virus Protection Policy
In May the City's Data Processing Advisory Committee (DPAC) finalized a policy regarding appropriate use of the Internet by City employees, and the policy is attached with this memo. Because use of the Internet can introduce computer viruses to the City's computer systems, the Virus Protection policy also accompanies this memo. DAS is a member of DPAC and we will comply with these policies to ensure proper use of this resource.
The Problem
The Internet is a tool which may be provided to individuals for use in City business. It contains many useful features, including email to non-City resources and access to research materials. The Internet can also be misused in a variety of ways, including:
- downloading files that contain viruses, endangering City information systems.
- accessing objectionable material.
- wasting work time by accessing non-work related information.
- misrepresenting an individual's opinion as City policy.
Individual Responsibility
Each individual user is responsible for the appropriate use of this resource as described in the Internet Acceptable Use policy.
Downloading material from the Internet without proper scanning for viruses can put your computer and other computers on the network at risk. All program files that are added to your computer from a non-commercial source (i.e., software that is not purchased in original diskette or CD ROM format) must be scanned with virus detection software. If you are not certain how to access and use virus scanning software, contact your LAN administrator before adding any software to your machine.
Please take the time to read both the Internet Acceptable Use policy and the Virus Protection Policy now.
Policy: Internet Acceptable Use
No.: 52
Sponsor: Standards Committee
Supersedes: December 13, 1994
Effective Date: May 9, 1995
5.2.0 PURPOSE:
To ensure that use of the Internet among employees of the City of Seattle is consistent with City policies, all applicable laws, and the individual user's job responsibilities.
To establish basic guidelines for appropriate use.
5.2.1 ORGANIZATIONS AFFECTED
All City departments.
5.2.2 REFERENCE
The following list is not exhaustive.
- Backbone Steering Committee Policy on Electronic Mail Systems Interconnection
- Backbone Steering Committee Policy on Separation of the Backbone Network from the Internet
- Backbone Steering Committee Proposed Policy on Internet Electronic Mail Connections
- Backbone Steering Committee Proposed Policy on Internet-Open City Systems
- DPAC Standard 5.1 Email Usage (being revised)
- DPAC Standard 5.3 Virus Protection (forthcoming)
- Seattle Municipal Code Chapter 4.16 (Ethics Code)
- Seattle Municipal Code 2.04.300 (Political Activities)
- Seattle Municipal Code 4.04.230 (Discipline and Termination)
- Memo from Mayor Norman B. Rice on Ethics & Elections Commission Advisory Opinion, June 2, 1994
- Mayor's Executive Order Affirming All Employees' Right to be Free from Sexual Harassment, October 28, 1994
- Mayor Rice Administration Vision of Valuing and Managing Diversity
- Revised Code of Washington Chapter 42.17.130 (Political Activities)
5.2.3 POLICY:
5.2.3.1 Internet access and the software and hardware for that access must be authorized by appropriate personnel in each City department. A condition of authorization is that all Internet users must read copy of this policy and applicable department policies on Internet use. Departments must keep a register of all Internet users.
5.2.3.2 Access to the Internet via City resources can only be used for City purposes, consistent with the memo from Mayor Norman B. Rice on Ethics & Elections Commission Advisory Opinion, June 2, 1994. To that end, this use cannot disrupt or interfere with the work of other network users, adversely affect the operation of the Internet or the City's own internal network, or misrepresent the interest of the City.
5.2.3.3 All use of the Internet via City resources must be in compliance with all applicable laws and policies (federal, state, and local laws, in addition to City policies); for example, all federal, state, and local laws, and City policy with respect to sexual harassment. Internet access via City resources, therefore, must not be used for illegal purposes.
5.2.3.4 All Internet use must be consistent with the City's Ethics Ordinance (SMC 4.16).
5.2.3.5 The safety and security of the City's network and resources must be considered at all times when using the Internet. Departments should provide employees with appropriate safety guidelines and software for their operations, including DPAC Standard 5.3 on Virus Protection. Individual users are responsible for adhering to applicable department policies or section
5.2.3.7 of this policy when downloading resources from the Internet.
5.2.3.6 There is a wide variety of information on the Internet. Some individuals find some information on the Internet offensive or otherwise objectionable. Individual users should be aware that the City has no control over and can therefore not be responsible for the content of information available on the Internet.
5.2.3.7 Departments should set rules or guidelines for the types of communications authorized via the Internet. In cases where no department policy exists, LAN administrators may use the following default policy:
5.2.3.7a Individual users must be aware of and at all times attempt to prevent potential City liability in their use of the Internet. For that reason, all outgoing messages, which do not reflect the official position of the City or Department, must include the following disclaimer: "The opinions expressed here are my own and do not necessarily represent those of the City of Seattle."
5.2.3.7b Resources which involve executable or binary files must not be downloaded without being properly scanned for viruses.
5.2.3.7c Resources which are not used for a clear City purpose must not be accessed or downloaded.
5.2.3.7d Resources of any kind, for which there is a fee, must not be accessed or downloaded without prior approval of a supervisor.
5.2.3.7e Public access databases (e.g., World Wide Web servers, File Transfer Protocol servers) must not be created or implemented without prior approval by DPAC or a body appointed by DPAC.
5.2.4 RESPONSIBILITY
Each individual user is responsible for complying with this and all other relevant policies when using the City's resources for accessing the Internet. Use of these same resources in violation of this policy or of applicable department policies is grounds for disciplinary action, as defined in Seattle Municipal Code 4.04.230.
Policy: Virus Protection
No: 5.3
Sponsor: City LAN Managers Group
Supersedes: N/A
Effective Date: December 13, 1994
5.3.0 PURPOSE:
To establish policy and assign responsibility for virus protection and eradication from City owned and non-owned computers used by the City of Seattle.
5.3.1 ORGANIZATIONS AFFECTED: All City departments.
5.3.2 REFERENCE:
- DPAC Standard 2.5 Network Security, section on Computer Viruses
- DPAC Standard 5.1 Email Usage
- Backbone Steering Committee Policy on Internet Open Systems
- Backbone Steering Committee Policy on Separation of the Backbone Network from the Internet
5.3.3 POLICY:
5.3.3.1 Departments shall ensure that all computer users know and understand safe computing practices. At a minimum, this shall include knowledge of the following:
- knowing the source of the software in use
- using write-protected program diskettes only
- performing frequent backups on data files
- using anti-virus software
- scanning for viruses on files that are downloaded from BBS's, the Internet, or any other outside source
- scanning for viruses on all diskettes brought from home or any other outside source
- booting only from a cleanly scanned diskette when not booting the workstation from the C drive
5.3.3.2 Departments shall purchase and install anti-virus software for all LAN servers and workstations. This software should be updated on a regular basis. Servers and workstations should be scanned periodically, either manually or via an automated program.
5.3.3.3 Departments shall report all virus outbreaks that have extended beyond a single PC to the DAS Helpdesk. The Helpdesk shall be charged with logging all such outbreaks and the eradication methods used by departments, and will notify other departments, if appropriate, in the event of a virus disaster.
5.3.4 DISCONNECTION FROM THE NETWORK
In the event of a serious virus outbreak, or in the event of a continued breach of this policy by a department, DAS will disconnect that department from the Citywide backbone (or any other Citywide network) until compliance with the policy.

