• Account & Access Management
• Application Services
• Data Center Hosting
• Desktop Management
• Enterprise Connectivity
• Information Security
• Messaging & Collaboration
• Professional Services
• Technology Sales
• Training, Education & Awareness
• Voice Services

OU Norman IT
OU Tulsa IT

Home  |  Online Help  |  Policies  |  Tier Ones

 :: HOME / policies /

Compliance Sanctions Policy:

Supporting documents: Full policy - Standard

The University will impose appropriate sanctions for non-compliance with its information system policies and/or regulations.

Employees:  A violation of information systems policies will also be considered a violation of the University’s Compliance and Quality Improvement Program.  Therefore, the sanctions will apply equally to violations of the University’s information system policies.  The sanctions imposed for a violation of information system policies will depend on the severity of the violation and will be imposed in accordance with the University’s Positive Discipline Policy, or the Faculty Handbook, whichever is applicable.

Students:  Students who violate the University’s information system policies will be subject to sanctions, which may include but are not limited to: fines, suspension or expulsion.  The type of sanction imposed will depend on the severity of the violation.  Sanctions will be imposed on students in accordance with applicable University policies and procedures.

Volunteers:  Volunteers who violate the University’s information system policies will be subject to sanctions dependent upon the severity of the violation, which may include but are not limited to: access removal or modification, re-assignment, or revocation of volunteer status. 

Business Associates:  A pattern of activity or practice which constitutes a breach or violation of the obligations under contract will result in the following actions as warranted: to cure the breach or end the violation, terminate the contract, or report the problem to applicable government agency.

For the protection of the University and its network/infrastructure, violations could result in restricted or revoked network access.

When sanctions are being imposed for the inappropriate use and/or disclosure of “sensitive” data, the sanctions must be commensurate with the severity of the violation and the following must be carefully considered:

• Carelessness or negligence
• Curiosity or concern
• Desire for personal gain or malice