Rules of Behavior

**Terms and Conditions of Use**

Rules of Behavior (ROB) for users of DHS APFS and IT resources that access, store, receive, or transmit information from or into DHS APFS

The following ROB apply to all Department of Homeland Security (DHS) employees and support contractors who use DHS APFS and IT resources such as laptop computers and portable electronic devices (PED) to access, store, receive, or transmit information to or from DHS APFS. PEDs include personal digital assistants or PDAs (e.g., Palm Pilots), cell phones, tablets, text messaging systems (e.g., Blackberry), and plug-in and wireless peripherals that employ removable media (e.g., CDs, DVDs). PEDs also encompass USB flash memory (thumb) drives, external drives, and diskettes.

The ROB applies to users at their primary workplace and at any alternative workplaces (e.g., telecommuting from home or from a satellite site). They also apply to users on official travel.

System Access:

• I understand that I am given access to DHS APFS based on a need to perform specific work. I will work within the confines of the access allowed and shall not attempt to access systems or applications, sites or data to which I have not been authorized access. I will not attempt to bypass system access control measures.

Data Protection:

• I will use only DHS office equipment (e.g., workstations, laptops, PEDs) to access DHS APFS and information when working in DHS leased or government owned space; I will use personally owned equipment only when necessary when working off-site.
• I will protect DHS APFS information from disclosure to unauthorized persons or groups.
• I will log off DHS APFS or lock my workstation or laptop computer whenever I step away from my work area, even for a short time; I will log off DHS APFS when I leave for the day.
• I will not access, process, or store classified information on DHS APFS.
• I will use DHS APFS for official DHS business only. I will not use DHS APFS for personal business.

Use of Government Office Equipment:

• I will comply with DHS policy regarding personal use of DHS office equipment. I understand that DHS office equipment is to be used for official use, with only limited personal use allowed. Personal use of government office equipment is described in DHS Management Directive (MD) 4600 (Personal Use of Government Office Equipment).
• I understand that my use of DHS office equipment may be monitored, and I consent to this monitoring.

Software:

• I agree to comply with all software copyrights and licenses.

Telecommuting (Working at Home or at a Satellite Center):

• At my alternate workplace, I will follow security practices that are the same as or equivalent to those required of me at my primary workplace;
• I will physically protect any laptops or PEDs I use for telecommuting when they are not in use;
• I will protect sensitive data at my alternate workplace. This includes properly disposing of sensitive information (e.g., by shredding).

Employees approved for telecommuting must adhere to the following ROB:

• At my alternate workplace, I will follow security practices that are the same as or equivalent to those required of me at my primary workplace;
• I will physically protect any laptops or PEDs I use for telecommuting when they are not in use;
• I will protect sensitive data at my alternate workplace. This includes properly disposing of sensitive information (e.g., by shredding).

Incident Reporting:

• I will promptly report DHS APFS security incidents to the DHS IT Help Desk.

Accountability:

• I understand that I have no expectation of privacy while using any DHS equipment and while using DHS Internet or e-mail services.
• I understand that I will be held accountable for my actions while accessing and using DHS systems and IT resources.

Non-Compliance:

• I understand that any violation of the ROB shall be considered a security incident. If the incident is deemed willful, it will be escalated to a security violation. Depending on the number of security violations and the specific information involved, disciplinary action for the violation may consist of a letter or warning/caution, revocation of access to the DHS APFS System, suspension, or removal from Federal Service. I may also be subject to criminal prosecution.

**WARNING** You are accessing a U.S. Government information system, which includes (1) this computer, (2) this computer network, (3) all computers connected to this network and (4) all devices and storage media attached to this network or to a computer on this network. This information system is provided for U.S. Government-authorized use only. Unauthorized or improper use or access of this system may result in disciplinary action, as well as civil and criminal penalties. By using this information system, you understand and consent to the following:

• You have no reasonable expectation of privacy when you use this information system; this includes any communications or data transiting, stored on, originated from or directed to this information system. At any time, and for any lawful government purpose, the government may monitor, intercept, search and seize any communication or data transiting, stored on, originated from or directed to or from this information system.