Policies & Procedures

I. DEFINITION

Remote Access: Remote access is the ability to get access to university Information Technology (IT) resources and systems without directly connecting to the university's wired network.

II. POLICY OWNER

The Vice President for Strategic Operations oversees this policy. Information Technology Services (ITS) is responsible for monitoring compliance with the policy and taking any necessary corrective action.

III. PURPOSE

The purpose of this policy is to define the minimum requirements for eligible employees to use university-owned and non-university-owned computing devices for remote access.

IV. POLICY

Remote Access Usage Requirements:

1. All computing devices used for remote access to the university IT resources and systems must adhere to:
   • the Remote Access standards,
   • the Malware Protection policy,
   • Protecting Your PC,
   • Protecting Your Mac
   • and Protecting Your Smart Device.
2. Users remotely accessing the university's IT resources and systems are responsible for selecting their own Internet Service Provider (ISP) and maintaining compliance with the contracts and policies of their ISP.
3. Users must not attempt to bypass security controls implemented for remote access solutions, including inactivity time limits.
4. Users should be aware that encryption technologies, which may be installed on devices used for remote access, are protected by U.S. government export restrictions. Further details may be found in the Encryption Policy.
5. Eligible employees using non-university-owned computing devices for remote access must be aware of the requirements in the Information Technology Standard Use of Non-Commonwealth Computing Devices to Telework document from the Virginia Information Technologies Agency (VITA).

V. PROCEDURES

Related policies, standards and guidelines may be maintained internally by Information Technology

VI. ENFORCEMENT

The university regards any violation of this policy as a serious offense. Violators of this policy are subject to disciplinary action, in addition to possible cancellation of IT resources and systems access privileges. Users of IT resources and systems at Longwood are subject to all applicable local, state and federal statutes. This policy does not preclude prosecution of criminal and civil cases under relevant local, state, federal and international laws and regulations.

Approved by the Board of Visitors, September 12, 2008.
Revised and approved by the Board of Visitors, March 27, 2009.
Revised and approved by the Board of Visitors, March 26, 2010.
Revised and approved by the Board of Visitors, June 11, 2021.