[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Advice needed please!
- To: <email@example.com>
- Subject: Advice needed please!
- From: "M Ros Doig" <M.R.Doig@derby.ac.uk>
- Date: Thu, 2 Mar 2000 19:16:17 EST
- Reply-To: firstname.lastname@example.org
- Sender: email@example.com
Dear All I have in front of me a license agrreement and I quote: Security The Subscriber shall take reasonable steps to restrict and control all use of the Databases, to enforce the restrictions contained in Article 5 and to prevent access except to Authorized Users. Without limiting the foregoing, the Subscriber shall implement an effective authentication system for Authorized Users and monitor and exercise control over and certify access to the CHIN Databases. The Subscriber is responsible for establishing, monitoring and enforcing controls for the proper use of the CHIN Databases including: a. adopting and effectively disseminating policies and procedures governing the proper use of CHIN Databases, including appropriate sanctions for knowing and willful infringements; b. providing instruction to all Authorized Users on the proper use of CHIN databases; and c. fully investigating and taking appropriate disciplinary action in cases of knowing and willful infringements. The Subscriber hereby grants CHIN the right to audit use of the Databases to ensure compliance with this agreement including and without limiting the foregoing, the number of simultaneous users able to access the Databases. OK so given that the access is by IP address: 1.Is the usual mean of logging onto the university network by username and control over and certifying access to this database?? 2. Am I bound to establish special procedures to cover for such monitoring and enforcement for this database other than those we generally employ eg making sure we give out username and passwords only to authorised users (not relevant in this case). Actually where IP address is the means of access we cannot monitor the individual use of all our databases!! 3.How do I effectively disseminate policies and procedures... 4.What are appropriate sanctions/ appropriate disciplinary action for infringements?? The license doesn't help here!! Certainly I don't feel I can sign this agreement as it stands even though it says that the subscriber shall take reasonable steps. I'm not sure that what follows is reasonable in our situation. Thanks in advance for your comments. Ros Doig Serials and Interlending Librarian University of Derby Kedleston Rd Derby DE22 1GB Tel. 01332 622222 Ext.1204 Fax. 01332 622767 Email. M.R.Doig@Derby.ac.uk