9.13 Reporting Policy Violations and Enforcement
   Computer users are required to report violations, or suspected violations, of this technology use and security policy. Penalties may be imposed under one or more of the following: Village regulations, state, federal or international law. Activities that should immediately be reported to your Department Director include, but are not limited to:
   •   Attempts to circumvent established computer security systems.
   •   Use or suspected use of virus, Trojan horse, or hacker programs.
   •   Obtaining or trying to obtain another user's password.
   •   Using the computer to make harassing or defamatory comments or to, in any way, create a hostile work environment.
   •   Storing Village data on portable devices or storage outside the Village's network without the express permission of the department director.
   •   Using the computer to communicate inappropriate messages or jokes that may be considered offensive by others.
   •   Illegal activity of any kind.
   •   Trying to damage the Village or an employee of the Village in any way.
   Technology use and security policy violations will be investigated. Complaints alleging misuse of IT resources will be directed to those responsible for taking appropriate disciplinary action. Noncompliance with the Village's policy may result in discipline up to, and including, termination.
   Depending upon the nature of the violation, criminal or civil charges might also be filed. Offenses that are in violation of local, state, federal or international laws will result in the immediate loss of computing privileges, possible termination of employment, and will be reported to the appropriate law enforcement authorities.
   The IT Manager working with Department Managers and Human Resources typically handles minor infractions of this policy or those that appear accidental in nature internally in an informal manner by electronic mail or in-person discussions. More serious infractions are handled via formal procedures. In some situations, it may be necessary to suspend account privileges to prevent ongoing misuse while the situation is under investigation.
   More serious infractions, such as unauthorized use, attempts to steal passwords or data, unauthorized use or copying of licensed software, violations of Village or department policies, or repeated violations of minor infractions may result in the temporary or permanent loss of access privileges. In all cases, the offender's Department Manager will be notified of the infraction.
   If you identify computer security vulnerability, you are required to report it to the Information Systems director immediately. The Village will not retaliate against individuals for reporting suspected violations of this policy.
   An employee who leaves employment must return all Village equipment, including telecommunication/computer equipment, to his/her Department Manager upon the first request prior to or after separation procedures.
(Ord. 23-1853, passed 5-3-23)