Des Plaines Police Department Information Technology Use PDF

Policy Des Plaines Police Department 322 Des Plaines PD Policy Manual Information Technology Use 322.1 PURPOSE AND SCOPE The purpose of this policy is to provide guidelines for the proper use of department information technology resources, including computers, electronic devices, hardware, software...

Policy Des Plaines Police Department 322 Des Plaines PD Policy Manual Information Technology Use 322.1 PURPOSE AND SCOPE The purpose of this policy is to provide guidelines for the proper use of department information technology resources, including computers, electronic devices, hardware, software and systems. This is a synopsis of the City of Des Plaines technology policy. For the complete city policy, refer to the City Personnel Policy Manual, Section 19.19 and Appendix N, Information Technology Resource Policy. 322.1.1 DEFINITIONS Definitions related to this policy include: Computer system - All computers (on-site and portable), electronic devices, hardware, software, and resources owned, leased, rented or licensed by the Des Plaines Police Department that are provided for official use by its members. This includes all access to, and use of, Internet Service Providers (ISP) or other service providers provided by or through the Department or department funding. Hardware - Includes, but is not limited to, computers, computer terminals, network equipment, electronic devices, telephones, including cellular and satellite, pagers, modems or any other tangible computer device generally understood to comprise hardware. Software - Includes, but is not limited to, all computer programs, systems and applications, including shareware. This does not include files created by the individual user. Temporary file, permanent file or file - Any electronic document, information or data residing or located, in whole or in part, on the system including, but not limited to, spreadsheets, calendar entries, appointments, tasks, notes, letters, reports, messages, photographs or videos. 322.2 POLICY It is the policy of the Des Plaines Police Department that members shall use information technology resources, including computers, software and systems, that are issued or maintained by the Department in a professional manner and in accordance with this policy. 322.3 PRIVACY EXPECTATION Members forfeit any expectation of privacy with regard to emails, texts or anything published, shared, transmitted or maintained through file-sharing software or any Internet site that is accessed, transmitted, received or reviewed on any department computer system. The Department reserves the right to access, audit and disclose, for whatever reason, any message, including attachments, and any information accessed, transmitted, received or reviewed over any technology that is issued or maintained by the Department, including the department email system, computer network and/or any information placed into storage on any department system or device. This includes records of all keystrokes or Web-browsing history made at any department computer or over any department network. The fact that access to a database, service Copyright Lexipol, LLC 2024/02/13, All Rights Reserved. Published with permission by Des Plaines Police Department Information Technology Use - 1 Des Plaines Police Department Des Plaines PD Policy Manual Information Technology Use or website requires a username or password will not create an expectation of privacy if it is accessed through department computers, electronic devices or networks. The Department shall not request, require or coerce a member to provide a username, password or other related account information, or require or coerce a member to invite other members to join a group affiliated with any personal account of the member or to join a member's list of contacts in order to gain access to the member’s account or profile on a personal online account (820 ILCS 55/10). 322.4 RESTRICTED USE Members shall not access computers, devices, software or systems for which they have not received prior authorization or the required training. Members shall immediately report unauthorized access or use of computers, devices, software or systems by another member to their supervisors or Watch Commanders. Members shall not use another person’s access passwords, logon information and other individual security data, protocols and procedures unless directed to do so by a supervisor. 322.4.1 SOFTWARE Members shall not copy or duplicate any copyrighted or licensed software except for a single copy for backup purposes in accordance with the software company’s copyright and license agreement. To reduce the risk of a computer virus or malicious software, members shall not install any unlicensed or unauthorized software on any department computer. Members shall not install personal copies of any software onto any department computer. When related to criminal investigations, software program files may be downloaded only with the approval of the information systems technology (IT) staff and with the authorization of the Chief of Police or the authorized designee. No member shall knowingly make, acquire or use unauthorized copies of computer software that is not licensed to the Department while on department premises, computer systems or electronic devices. Such unauthorized use of software exposes the Department and involved members to severe civil and criminal penalties. Introduction of software by members should only occur as part of the automated maintenance or update process of department- or City-approved or installed programs by the original manufacturer, producer or developer of the software. Any other introduction of software requires prior authorization from IT staff and a full scan for malicious attachments. 322.4.2 HARDWARE Access to technology resources provided by or through the Department shall be strictly limited to department-related activities. Data stored on or available through department computer systems shall only be accessed by authorized members who are engaged in an active investigation Copyright Lexipol, LLC 2024/02/13, All Rights Reserved. Published with permission by Des Plaines Police Department Information Technology Use - 2 Des Plaines Police Department Des Plaines PD Policy Manual Information Technology Use or assisting in an active investigation, or who otherwise have a legitimate law enforcement or department-related purpose to access such data. Any exceptions to this policy must be approved by a supervisor. 322.4.3 INTERNET USE Internet access provided by or through the Department shall be strictly limited to departmentrelated activities. Internet sites containing information that is not appropriate or applicable to department use and which shall not be intentionally accessed include, but are not limited to, adult forums, pornography, gambling, chat rooms and similar or related Internet sites. Certain exceptions may be permitted with the express approval of a supervisor as a function of a member’s assignment. Downloaded information shall be limited to messages, mail and data files. 322.4.4 OFF-DUTY USE Members shall only use technology resources provided by the Department while on-duty or in conjunction with specific on-call assignments unless specifically authorized by a supervisor. This includes the use of telephones, cell phones, texting, email or any other "off the clock" work-related activities. This also applies to personally owned devices that are used to access department resources. Refer to the Personal Communication Devices Policy for guidelines regarding off-duty use of personally owned technology. 322.5 PROTECTION OF AGENCY SYSTEMS AND FILES All employees have a duty to protect the system and related systems and devices from physical and environmental damage and are responsible for the correct use, operation, care and maintenance of the system. Members shall ensure department computers and access terminals are not viewable by persons who are not authorized users. Computers and terminals should be secured, users logged off and password protections enabled whenever the user is not present. Access passwords, logon information and other individual security data, protocols and procedures are confidential information and are not to be shared. Password length, format, structure and content shall meet the prescribed standards required by the computer system or as directed by a supervisor and shall be changed at intervals as directed by IT staff or a supervisor. It is prohibited for an employee to allow an unauthorized user to access the system at any time or for any reason. Members shall promptly report any unauthorized access to the computer system or suspected intrusion from outside sources (including the Internet) to a supervisor. 322.6 INSPECTION OR REVIEW A supervisor or the authorized designee has the express authority to inspect or review the computer system, all temporary or permanent files, related electronic systems or devices, and any Copyright Lexipol, LLC 2024/02/13, All Rights Reserved. Published with permission by Des Plaines Police Department Information Technology Use - 3 Des Plaines Police Department Des Plaines PD Policy Manual Information Technology Use contents thereof, whether such inspection or review is in the ordinary course of his/her supervisory duties or based on cause. Reasons for inspection or review may include, but are not limited to, computer system malfunctions, problems or general computer system failure, a lawsuit against the Department involving one of its members or a member’s duties, an alleged or suspected violation of any department policy, a request for disclosure of data, or a need to perform or provide a service. The IT staff may extract, download or otherwise obtain any and all temporary or permanent files residing or located in or on the department computer system when requested by a supervisor or during the course of regular duties that require such information. Copyright Lexipol, LLC 2024/02/13, All Rights Reserved. Published with permission by Des Plaines Police Department Information Technology Use - 4