Access Warning Statements

Computer system and service administrators may choose to display a "warning statement" at the points where individuals can gain access to a computer, service, or network. Departments who provide large- or medium-scale computing and network services, as well as individuals who operate only one or several computers that enable Internet connections, may want to implement such a message. These messages would be generated under certain conditions — for example: a login screen, kerberos authorization menu, or any point of potential interface with a networked computer.

Warning statements are different from the standard login/entry interfaces which describe how to connect to and use a service. They may be targeted to various types of audiences and may have multiple purposes, such as:

1. to inform or remind authorized users of:

• the purpose(s) of the service;
• relevant appropriate use regulations governing the service;
• possible penalties for inappropriate use;

and/or

2. to inform unauthorized users of:

• who is eligible to access the service;
• possible penalties for unauthorized access;
• how to locate other services that may be what they were actually looking for.

Warning statements may include some of the sample phrases below, or other text as appropriate for various situations. If departments would like assistance drafting their warning statements, they may wish to consult with the Information Technology Policy Services (ITPS) group from Information Systems and Technology (IST) (itpolicy@berkeley.edu).

SAMPLE LANGUAGE:

(Any or all of these sample phrases can be adapted and incorporated by departments in warning statements to meet their specific needs.)

This computer, [machine name], at the University of California, Berkeley is the property of The Regents of the University of California.

Only authorized users may access this system.

For assistance identifying a campus computing or communications service that is available to you, see the University of California, Berkeley computing&communications website.

Unauthorized access will be investigated and penalties will be pursued in conformance with applicable laws and regulations.

---

This [website] is the property of The Regents of the University of California. It is to be used only for [class registration activities by authorized students, faculty, or staff].

By continuing this [online registration] you are certifying that you have read and agree to abide by the regulations listed below. [with links … ] You will be held accountable for any activities not in compliance with those regulations.

Misuse or unauthorized access may result in legal prosecution or penalties under law or campus regulations governing conduct and the user's terms and conditions of employment.

Penalties may include fines, imprisonment, termination of affiliation with the campus, and/or temporary or permanent loss of campus computing access.

LOGOFF immediately if you do not agree to the conditions in this warning.

---

This system is to be used only for [system] administration activities by authorized staff.

Use is subject to applicable laws, policies, and guidelines governing use of Campus resources, as well as the "Privileged Access Agreement" for the [name of department].

RELATED RESOURCES:

• Guidelines for Administering Appropriate Use of Campus Computing and Network Services are intended to assist Berkeley Campus departments or units to ensure appropriate use of their computing and network services and to respond correctly to allegations of misuse.
• Computer, network, and data security lists some available resources for preventing or responding to electronic communications resource security problems.
• Anti-Relay Resources provides information about the "open relay" problem on campus and links to information on how to fortify computers to prevent such unauthorized activity.
• A Privileged Access Agreement can be implemented by departments to inform employees with special access privileges to a computing system or network that they must comply with applicable regulations.
• Responding to Inappropriate Use of Computing and Network Resources helps campus computer users identify what the rules are and where to report misuse.