Mainframe Policies

• No access to the UC Mainframe will be granted without appropriate requests and approvals.
• Mainframe accounts that are not used for ten (10) months will be suspended. Mainframe accounts that are suspended for fourteen (14) months will be deleted.
• A Mainframe Access Request Form is required to reinstate a deleted account.
• Requests for dataset access may be sent via e-mail and must contain a valid business reason for the requested access. The request must come from a person authorized to grant access.
• Requests for dataset access should be qualified as far as possible, but must be qualified at least to the second level.
• All requests for access to production data and departmental data must be made in writing. Approval must be sent to security by an authorized person. The request must contain a business reason for access and must be qualified to at least the second level (e.g., DSAC.HOPE), and should contain an expiration date.
• All requests for access to production data by a contractor must be made in writing. Approval must be sent by the AVP on the requesting side to the AVP of UCit Core Applications. The AVP of UCit Core Applications will forward approval to security prior to access being granted.
• Passwords for TPX, TSO, and Natural must be changed every 90 days.
• No password will be reset for an account that does not belong to the user requesting the password reset.
• No person may use an account that belongs to another person.
• Each person with an account on the UC mainframe may have one and only one username and one and only one userid.
• Each person accessing the UC mainframe must have a unique account belonging only to that person.
• Each contractor, temp, and student worker must provide an expiration date for his or her mainframe account. If no date is provided, an expiration date of six (6) months will be placed on the account. Expiration dates may be extended by having the authorized person for a department submit an e-mail message to infosec@ucmail.uc.edu indicating the new expiration date.

In accordance with University Rule 3361:10-17-04: Conduct and Ethics:
Use of University Resources:

Members of the Faculty, Administration, Student Body, Volunteer Workers, and Staff are responsible for the appropriate use of University resources. Use of University resources in a manner inconsistent with this rule is a violation subject to disciplinary action.

(B) University Property, Facilities, and Services:

(3) All University computers shall be used solely for authorized academic, instructional, research, administrative or contract purposes. Any unauthorized use of computer resources and/or facilities shall constitute a violation of University policy and will subject the violator to University disciplinary action.

Further, all users of the university's information technology resources must adhere to UC's General Policy on the Use of Information Technology.