A unique signon and password should be provided to
each user that is not easily guessed. Impress upon the student the importance of keeping
their password secret.
Student names and sign-on names should be recorded
in a log securely maintained by the school computer room monitor each time a student is
granted permission to use a computer.
This log should also contain the unique
designation for the computer the student is assigned to.
No swapping of assigned computers should be
permitted unless there is a technical difficulty.
Computers should be programmed to sign off after a
short period of inactivity requiring the student to sign back on. This prevents a second
student from using a computer already signed on by a different student.
Install video surveillance that is time coded, to
show the activity at all the student computers. If video surveillance is impractical for
some circumstances then a monitor should visually oversee the activities of the students
on the computers. This establishes a record of which student was using a particular
computer at a particular time.
Servers and firewalls should be maintained in a
secure area with limited access.
Logging should be set on the servers/firewalls so
that an identification can be made at a later date as to what computer was used at a
certain time to access e-mail or the internet.
Video surveillance should also be maintained on
the servers/firewall.
No student should be allowed to install software
or data files on a computer without authorization.
A strong virus protection program must be
installed and upgraded daily.
Computer room monitors should be actively
overseeing the content of the programs being used by the students.
A banner should appear prior to signon that
requires the user to acknowledge that the computer is not for personal use and that all
information on the computer is property of the school district, and any unauthorized
access is illegal.
Scheduled backups should be maintained in a secure
facility away from the server/firewall and reviewed to assure it is accurate.
Review server/firewall logs in a timely fashion so
that intrusion attempts or unauthorized access can be addressed immediately.
Software should include password verification
programming to eliminate duplicated or overly simplistic passwords.
Computer Crime 
