2.4 Internet Policy
Purpose
Internet access is an essential tool in a modern workplace. The capacity to use the internet carries with it certain responsibilities. Incorrect or inappropriate use of the internet can have serious consequences for the Government. The intent of the following policy and guidelines is to clarify the responsibilities of Ministerial staff use of the internet and to establish professional and ethical conduct of good internet usage.
Internet access is a valuable tool that is available to all users of the Ministerial network. Staff are encouraged to use the internet as an information resource and to become familiar with how to use the facilities it offers.
Due to the risk of security threats from the internet, access will be controlled and monitored. Unauthorised accessing, transmitting or storing of material that might bring the Government into disrepute is strictly prohibited.
Inappropriate Use
Internet usage must be able to withstand public scrutiny and/or disclosure.
Unauthorised accessing, transmitting or storing material that might bring the Government into disrepute is not permitted
The internet must not be used to:
- Defame, harass, abuse or otherwise offend other internet users, individuals, organisations or departments;
- Knowingly download, store or distribute offensive material (eg. pictures and literature) or contrary to law material containing defamatory comments;
- Attempt to obscure the origin of any message or download material under the assumed internet address or otherwise disguise user identity;
- Knowingly obtain unauthorised access to information or damage, delete, insert or otherwise alter such information with malicious intent;
- Circumvent copyright provisions;
- Maintain or support a personal private business;
- Disrupt communication and information by placing an unnecessary burden on agency resources; or
- Perform unsolicited mass marketing on the internet (spamming).
Inappropriate use of the internet can lead to disciplinary action and/or the revocation or suspension of internet access. Any employee found to have used a government-owned communication or information device to download, store or distribute pornography will be dismissed.
It should be noted that all use of the Internet, including browsing, downloading, email, viewing video footage or streaming radio broadcasts incurs data download charges. Streaming of radio or video broadcast from internet sites can cause very large amounts of data to be downloaded and should be used to official purposes only and should not be left unattended.
Ministerial Services will attempt to block access to sites that are inappropriate. As it is impossible to maintain an accurate "blacklist" of all inappropriate sites, inevitably some sites will be incorrectly classified. The system has the ability to block or unblock sites upon request to Ministerial Services.
Personal use of the internet
Cabinet has endorsed an internet policy and principles statement which requires that internet access be provided for officially approved purposes only.
Officially approved purposes includes limited personal use. Limited personal use of the internet is permitted where it:
- Generally takes place during the employee's non-work time;
- Incurs minimal additional expense to the Government;
- Is infrequent and brief;
- Is not used to support a personal or private business;
- does not interfere with the operation of the Government;
- Does not compromise the security of the Ministerial systems; and
- Does not violate and State/agency policy related State/Federal legislation and regulation.
Examples of limited personal use include:
- Accessing non-work related sites during a lunch break;
- Briefly accessing a non-work related site during office hours, similar to making a brief personal phone call; and
- Accessing an educational institution's web site to download assignments or course notes.
Any personal internet access is at the user's risk. The Government is not liable for any loss or damage caused by the Ministerial Internet access system.
The privilege of using Government devices for limited personal use may be revoked or limited at any time. All internet access including personal access will be monitored.
Who can access the internet
Use of the Ministerial network internet link by unauthorised users can pose a security risk to Government information and bring the Government into disrepute.
Internet access is provided to authorised persons only. Sharing of passwords or logging on to provide access for unauthorised persons is prohibited.
Viruses and other internet attacks
The internet is one of the most common entry points for viruses, malicious code, and "hacker" attacks.
The Ministerial IT systems will use anti-virus software and will be configured to protect against viruses. Anti-virus software will automatically scan all traffic at the internet gateway and at all workstations. In addition to anti-virus software, the internet system will proactively block executable content from entering the network, such as ".exe", and other similar file types.
A firewall will be used to reduce the risk of attacks from the internet and limit the damage any attack may cause to Ministerial systems.
Monitoring
All use of the internet will be monitored.
All internet access will be logged. For each site accessed, an audit log of username, site address, and date and time will be automatically recorded and archived. A separate log of attempted access to blacklisted sites will also be recorded and archived.
Access to the audit logs will be strictly controlled and used only for official purposes.
Internet system
The use of an external, non-supported internet link can pose a security risk to government information.
A centrally provided internet link will be used within the Ministerial network that incorporates appropriate security systems.
Communication on the Internet
If staff are participating in any communication on the Internet such as newsgroups, email or chat, ensure that any representation on behalf of the Government is appropriately authorised. If the officer does not have the authority to speak on behalf of the Minister in a public forum, they should represent themselves on the Internet as a private individual, not as a Government representative.
Policy awareness and acknowledgement
All new users must sign a form stating that they are aware of and agree to adhere to this policy. The induction for new staff and the QuickStart training course which is recommended for all new staff, will also inform users of this policy.
See - Electronic mail - Information security
Last reviewed: 17 July, 2009
Last updated: 22 July, 2009
^ to top
