Information Infrastructure and Services Rules 2009

Overview

The Australian National University Information Infrastructure and Services Rules 2009 were enacted to establish and govern the conditions for accessing the university’s information infrastructure and services, ensuring a secure and efficient digital environment for its users. These rules were formulated under the authority of section 5 of the Information Infrastructure and Services Statute 2008, reflecting the university's commitment to maintaining high standards of digital governance. The primary objective of these rules is to define the terms of access and use, alongside outlining the penalties for any breaches, thereby ensuring compliance and protecting the university's digital assets. Developed and approved by the Council of the Australian National University, these rules aim to provide a clear framework for the responsible use of information technology within the institution.

Scope and Application

The Australian National University Information Infrastructure and Services Rules 2009 apply to any person or entity granted access to the University's information infrastructure and services. This encompasses students, staff, visiting researchers, and other authorised users interacting with the University's IT systems, networks, and related services. The Rules are designed to regulate the conduct and transactions of these individuals and entities when accessing or using the University's information resources, ensuring compliance with the University’s policies and standards. The geographic and jurisdictional reach of the Rules is limited to the Australian National University, operating under the Commonwealth jurisdiction. The Rules do not specify any exclusions or exemptions, but they do outline the procedures and penalties for offences related to misuse or unauthorised access to the University’s information systems. The application and enforcement of the Rules may be further extended or detailed through subordinate instruments, providing additional clarification or specifications as necessary.

Key Provisions

The Australian National University Information Infrastructure and Services Rules 2009 (the Rules) establish the framework for access to, and use of, the University's information infrastructure and services. These provisions are detailed in sections 1 through 21 of the Rules, where the conditions of access, permissible uses, and user conduct are explicitly outlined. These sections ensure that all users of the University's information systems are clearly informed about their rights and responsibilities. Under these Rules, various obligations and requirements are imposed on the users and entities governed by them. Section 3, for instance, mandates that users must adhere to the University's policies and guidelines concerning the use of information infrastructure and services. This includes compliance with the University's Acceptable Use Policy and other relevant policies. Section 4 goes further to specify the types of activities that are prohibited, such as unauthorised access to systems, distribution of malware, and any form of cyberbullying or harassment. These obligations are designed to protect the integrity and security of the University's information systems and to ensure a safe and productive environment for all users. Breach of the Rules can lead to significant consequences, as outlined in sections 18 to 21. Section 18 details various offences that can be committed, such as unauthorised access or modification of data, and misuse of the University's information infrastructure and services. The severity of the consequences varies depending on the nature of the offence. Section 19 explains that these offences can result in both civil and criminal penalties. The Rules provide for maximum penalties, with section 20 specifying that serious offences can lead to fines of up to $22,200 for individuals and $111,000 for bodies corporate. Additionally, section 21 allows for the imposition of disciplinary action by the University, which can include suspension or expulsion for students, and termination of employment for staff and contractors. These measures are intended to deter violations and to ensure that offenders face appropriate consequences for their actions.