Skip to content

Governance and Structure

​​​​​The University Executive Committee is responsible for all matters associated with the development and management of the university.

Bring Your Own Device (BYOD) Policy

Last updated: 8 April 2025

Contents

Introduction

Aim, purpose and scope

Type of policy

Related policies

Policy details

Agreement statement

Introduction

The following policy has been developed to help foster and promote a suitable and secure learning/working environment. Therefore, all students, staff, agents, partners, visitors and contractors are required to follow the rules stated in this policy when using the University’s IT systems, network, WiFi, email and/or internet facilities.

The University will enforce this policy in order to protect those in its care, on its property or using its IT Services.

Aim, purpose and scope

The purpose of this Bring Your Own Device (BYOD) Policy is to establish the rules which govern the use of devices belonging to students, staff, agents, partners, visitors and contractors which are connecting to University systems and services via the Wireless Network.

For clarification, it is not permissible for any BYODs to be physically connected to the University Network. BYODs may be connected to the internet using Eduroam for students and staff. For visitors the UoG Public Wi-Fi is available to use.

Anyone wishing to physically connect a BYOD to the University Network must first receive written authorisation from the Director of Estates and IT or the Head of IT. There are no exceptions to this policy. The Director of Estates and IT and the Head of IT can both be contacted via the IT ServiceDesk.

The scope of this policy includes any BYOD belonging to students, staff, agents, partners, visitors and contractors. Such devices include, but are not limited to, smart phones, tablets, laptops, servers, portable hard drives, USB sticks or any other fixed or mobile computing device.

For clarification, BYODs in student halls of residence do not fall within the scope of this policy.

Type of policy

User Policy

This policy should be utilised in conjunction with the referenced policies below:

Acceptable Use Policy (AUP) For All Users

Acceptable User Policy (AUP) for privileged staff users – available on Sharepoint

Policy details

The University reserves the right to refuse, prevent or withdraw access to devices where it considers there to be an unacceptable security, or other risk.

Anyone using a BYOD must ensure that the operating system and security software is kept up to date at all times.

If staff attempt to use BYOD which is not fully updated to the latest operating system and fully patched their account will be blocked by IT services until remediated. This includes University owned devices such as iPads and iPhones. It is the responsibility of the member of staff to ensure any devices they use are compliant with this requirement.

If a staff personal or work supplied device is end of life and cannot receive security patches it must not be used for work purposes. IT Services will seek to block any such device from accessing the university network.

Anyone using a BYOD will need to co-operate with IT Services staff should it be necessary to access or inspect the device. The University reserves the right to access BYODs where it is suspected that there has been a security breach or a breach of any University policy.

Anyone using a BYOD must adhere to all relevant IT related University policies.

Support

The University takes no responsibility for supporting, maintaining, repairing, insuring or otherwise funding BYODs. The University will not be responsible for any loss or damage resulting from any support given or advice provided.

Staff with Privileged users

If you are a member of staff with privileged access to university systems then you should not be accessing these from a personal or shared device. You should have a separate account for day to day work and a dedicated admin account for privileged access. It is your responsibility as a privileged user that this is adhered to.

Consequences of breaching this policy

Any attempt to violate the provisions of this policy, regardless of the success or failure of the attempt, will, in the case of staff and students, be dealt with under the terms of the relevant disciplinary procedure or policy as applicable to staff and students, and may result in disciplinary action and/or notification to the relevant law enforcement agencies.

Where a visitor or contractor violates or attempts to violate this policy, their access to the University’s IT systems, network, WiFi, email and/or internet facilities shall be withdrawn and the University will, where appropriate, notify relevant law enforcement agencies. In the case of contractors, the University will seek to have the individual removed from services provided to the University, on a permanent basis. The University also reserves the right to withdraw access from all or part of its IT systems, network, WiFi, email and/or internet facilities where it reasonably believes that this policy is being contravened.

Was this article helpful?