|
|
|
|
|
|
|
The current, official version of this policy and associated procedures is
maintained on this Policies and Procedures Database. Printing this policy
or transferring it into another electronic format will result in the
document being an uncontrolled copy which might not be current.
|
|
|
|
|
|
The purpose of this policy and procedure is
This policy and procedure applies University-wide.
It applies to all information technology (IT) activities and infrastructure across the University including (but not limited to):
irrespective of their funding source and irrespective of whether development and/or operational services will be provided by Information Technology Services (ITS) or a third party.
|
None |
|
|
Name |
Location |
|
None. |
|
|
1. |
Compliance |
|
1.1 |
All initiatives involving the use of Information Technology must comply with this policy and procedure, including both operational and development work.
|
|
1.2 |
Non-compliance with this policy and procedure, in particular divergence from SITRA, will only be authorised on a case by case basis and must be authorised by the Chief Information Officer (CIO).
|
|
1.3 |
The CIO is empowered to disconnect systems which, through non-compliance with the relevant standards, represent an unacceptable level of risk to the University. |
|
2. |
Use of the Swinburne Information Technology Reference Architecture (SITRA)
|
|
2.1 |
The SITRA must be referred to and complied with when undertaking an initiative involving the use of IT, regardless of whether work is undertaken within the University or by third parties.
|
|
2.2 |
The SITRA must be made available to third parties seeking to provide IT related goods or services to the University. It is the responsibility of the procuring business unit to ensure that such third party providers can demonstrate compliance with the SITRA.
|
|
2.3 |
The CIO will have delegated responsibility for the maintenance of SITRA as appropriate.
|
|
3. |
Principles of the SITRA
|
|
3.1 |
In order to support flexible, secure, sustainable and supportable IT systems, the SITRA will accord with the following principles
|
|
3.2 |
The SITRA defines core systems and the level of availability and support which is required for a core system
|
|
4 |
Procurement |
|
4.1 |
The procurement of IT related goods and services must comply with this policy and procedure, and with other relevant policies, including the Tenders and Quotations Policy.
|
|
4.2 |
All hardware and software is to be purchased via IT Procurement, a section within the ITS Department
|
|
4.3 |
The Chief Information Officer will provide a catalogue of approved hardware, software and mobile devices
|
|
4.4 |
Equipment listed in the IT procurement catalogue will be updated from time to time under the delegated authority of the Chief Information Officer
|