Services

IT policies and guidelines

IT policies and guidelines, non disclosure agreement (NDA, non-disclosure agreement, confidential disclosure agreement, CA CDA), cloud service guidelines, printing policy, email policies etc. here.

This page is no longer up to date for security documentation. Documents have been moved to Cyber Security hub and ISMS hub.

You can find documents referred in this page after the text chapters.

Policy of information systems usage at Aalto University

Formerly the policy of information systems usage at Aalto University and related guideline for the validity of the access rights in Aalto University’s information systems were followed when those information systems, which were either the responsibility or administrated by Aalto University, were in question or used.

However, this policy and guideline are no longer in force. Instead the acceptable use of the information systems is described in the binding instuction A8 and matters related to the validity of the access rights are discussed in the binding instruction A9.

Policy of sanctions for IT offences at Aalto University

Due to the heterogeneity of these user account holders, any IT offences will be dealt with on a case-by-case basis. The tables outline recommended sanctions for IT offences for the university's degree students, employees and others. The tables contain examples of typical offences linked with the use of information systems, grouped by the seriousness of the offence. The president has approved the use of policy 3/6/2010.

Policy of sanctions for it offences at Aalto University

53.74 K

A8 Asset Management 1.0

108.49 K

A9 Access Control 1.0

212.31 K

Aalto university policy and procedures for handling email

There is different email policy for students and employees. Policies concern all users of Aalto University email systems.

Policy and procedures for handling email defines the various types of email messages and addresses and sets guidelines for handling messages and addresses. Moreover, the policy defines the rights of the university to process messages within the email systems and what actions to take in special circumstances related to an email message. The president has approved the use of policy 3/6/2010.

These policies are also available here

Aalto university printing policy

IT portfolio steering group has approved the general policy of printing services for Aalto University. The policy covers the responsibilities related to the use of the printing service, guidelines for printers’ procurement, reasonable printing quota for students and staff, monitoring and a life cycle of printers.

Confidentiality undertaking while performing university’s system Administrator tasks

The confidentiality undertaking applies to information received in the capacity of an employee of Aalto University or when otherwise performing tasks assigned by the University which is confidential under the provisions of an Act or Decree or whose confidentiality is based on a contract concluded by the University or a security classification drawn up by the University. Persons without Aalto-university user id must also fill “no contractual employment person data form”.

https://www.aalto.fi/en/services/non-disclosure-agreements

Instructions for Aalto University administrators, information security contacts and procurement contact persons – appointments, duties

It is up to the directors of the departments and other units to ensure that the University’s IT systems and other IT resources are maintained in a professional manner, and that the administrators can be reached when necessary, while taking holidays and other absences into account. In the following you can read more specifically about appointments, responsibilities and duties of administrators, information security contacts and procurement contact persons.