Acceptable Use Policy (AUP) For All Users
Page Contents Introduction Aim, purpose and scope Type of policy...
The University Executive Committee is responsible for all matters associated with the development and management of the university.
Last updated: 8 April 2025
Document Control
Issue | Date of issue | Reason for issue |
1 | January 2025 | Updated policy for 2025 |
Document Ownership
Owner | Date | |
Author | Mark Weller, Head of IT | January 2025 |
Approval | Julia Lloyd, Director of Estates and IT | January 2025 |
The following policy has been developed to help foster and promote a suitable and secure learning/working environment. Therefore, all students, staff, agents, partners, visitors and contractors are required to follow the rules stated in this policy when using the University’s IT systems, network, WiFi, email and/or internet facilities.
The University will enforce this policy in order to protect those in its care, on its property or using its IT Services.
The purpose of this Bring Your Own Device (BYOD) Policy is to establish the rules which govern the use of devices belonging to students, staff, agents, partners, visitors and contractors which are connecting to University systems and services via the Wireless Network.
For clarification, it is not permissible for any BYODs to be physically connected to the University Network. BYODs may be connected to the internet using Eduroam for students and staff. For visitors the UoG Public Wi-Fi is available to use.
Anyone wishing to physically connect a BYOD to the University Network must first receive written authorisation from the Director of Estates and IT or the Head of IT. There are no exceptions to this policy. The Director of Estates and IT and the Head of IT can both be contacted via the IT ServiceDesk.
The scope of this policy includes any BYOD belonging to students, staff, agents, partners, visitors and contractors. Such devices include, but are not limited to, smart phones, tablets, laptops, servers, portable hard drives, USB sticks or any other fixed or mobile computing device.
For clarification, BYODs in student halls of residence do not fall within the scope of this policy.
User Policy
This policy should be utilised in conjunction with the referenced policies below:
Acceptable Use Policy (AUP) For All Users
Acceptable User Policy (AUP) for privileged staff users – available on Sharepoint
The University reserves the right to refuse, prevent or withdraw access to devices where it considers there to be an unacceptable security, or other risk.
Anyone using a BYOD must ensure that the operating system and security software is kept up to date at all times.
If staff attempt to use BYOD which is not fully updated to the latest operating system and fully patched their account will be blocked by IT services until remediated. This includes University owned devices such as iPads and iPhones. It is the responsibility of the member of staff to ensure any devices they use are compliant with this requirement.
If a staff personal or work supplied device is end of life and cannot receive security patches it must not be used for work purposes. IT Services will seek to block any such device from accessing the university network.
Anyone using a BYOD will need to co-operate with IT Services staff should it be necessary to access or inspect the device. The University reserves the right to access BYODs where it is suspected that there has been a security breach or a breach of any University policy.
Anyone using a BYOD must adhere to all relevant IT related University policies.
The University takes no responsibility for supporting, maintaining, repairing, insuring or otherwise funding BYODs. The University will not be responsible for any loss or damage resulting from any support given or advice provided.
If you are a member of staff with privileged access to university systems then you should not be accessing these from a personal or shared device. You should have a separate account for day to day work and a dedicated admin account for privileged access. It is your responsibility as a privileged user that this is adhered to.
Any attempt to violate the provisions of this policy, regardless of the success or failure of the attempt, will, in the case of staff and students, be dealt with under the terms of the relevant disciplinary procedure or policy as applicable to staff and students, and may result in disciplinary action and/or notification to the relevant law enforcement agencies.
Where a visitor or contractor violates or attempts to violate this policy, their access to the University’s IT systems, network, WiFi, email and/or internet facilities shall be withdrawn and the University will, where appropriate, notify relevant law enforcement agencies. In the case of contractors, the University will seek to have the individual removed from services provided to the University, on a permanent basis. The University also reserves the right to withdraw access from all or part of its IT systems, network, WiFi, email and/or internet facilities where it reasonably believes that this policy is being contravened.