Anti-Virus Software Requirement and Responsibilities

Viruses, worms, and other malicious software can destroy critical or confidential data, compromise security, and generate a large volume of network traffic. A small number of infected computers can have a catastrophic effect on NC State's networked systems and on the campus's ability to perform core business and instructional functions. Therefore, in order to protect the campus computing infrastructure, the University is implementing a requirement for the use of anti-virus software.

Anti-Virus Software Requirement and Responsibilities
A. All University owned computers connecting to the campus network (including computers connecting via the NC State wireless network (Nomad), NC State VPN, or NC State modem pool) that are running one of the listed operating systems for which the University has site-licensed an anti-virus software package are required to install and enable the University site-licensed anti-virus software. If a user desires to run an alternate anti-virus product, it must be on the approved list () or they must request approval with justification according to the provided instructions at . It is also highly encouraged that the same requirements be followed for personal machines. Note that ResNet already has an anti-virus requirement that covers residence hall occupants; see ResNet Terms of Use.

B. Installation, troubleshooting, and maintenance of the anti-virus software are the responsibility of all persons having administrative privileges on that computer.

C. Computers running operating systems for which the University has not site-licensed an anti-virus software package are exempt from this requirement. However, administrators should be aware of the risk to their systems and data should a virus infection occur. It is recommended they acquire and install anti-virus software as they deem appropriate to mitigate these risks. If needed, users should consult with other local computer administrators or the ITD Security Group for guidance in making this decision.

D. Individuals and groups requiring an exemption from the University mandated anti-virus software requirement must submit justification via the online form at . The requestor needs to include the necessity for an exemption and describe what alternate protections are in place. The exemption needs to be supported by the unit IT Director and forwarded to the Security Subcommittee for final approval. Note that this exemption only applies to required anti-virus use - the exempted computers are still subject to all other aspects of the Computer Use Regulation.

Anti-Virus Software Violations
Violations of this anti-virus requirement will be handled in accordance with the Computer Use Regulation. This may result in the computer being blocked from the network if it is causing a security or performance impact on the campus network. Computers will not be unblocked until the machine is cleaned and brought into compliance. In addition, users may be disciplined as allowed in Section V of the Computer Use Regulation