Information Security Management System
Information Security Policy
Number: DI/ISMS/13
Version Number: 02
Date: 2017-9-20

Access Termination Policy

Unauthorized access to the Office of Information Technology and Communications may cause serious harm to systems and communications. Staff at the Office can use fixed entry methods to access systems or private office spaces without being noticed. Potential damages include theft of funds, equipment, or intellectual property, disclosure of confidential information, damage to property or individuals, and hackers could exploit inactive accounts to carry out these activities.

When someone leaves the university, their access rights must be immediately cancelled, and the direct supervisor must begin removing access rights when the employee departs from either the Information Department or other departments. The employee’s supervisor should ensure that their subordinates' access rights have been canceled.

When employees change roles, supervisors should withdraw any unnecessary access rights for employees based solely on their roles and maintain them in the required locations. Please notify the Office of Technology Information of any remote access permissions to dedicated applications or servers belonging to a former employee or upon termination of employment, so that the former employee cannot access the university network. The Technology Information team makes diligent efforts to track and reduce unauthorized access activities.