One-On-One Training Checklist

One-On-One Training Checklist
Use our checklist to help you prepare and deliver a one-on-one training plan for new employees. This list is by no means exhaustive of the topics and issues to be covered during training sessions, so customize the sheet however you see fit to ensure that it complies with your company's HR policies and regulations.
Training Environment Completed
Design a training timetable
Clear schedule and as many job duties as possible
Determine a quiet, distraction-free training location
Prepare agenda of topics/issues to be covered on first day
Compile all materials, equipment, and tools necessary for training
Compile finished examples of work to be completed during training

Training Session Steps Completed
1. Present materials and/or training equipment to recruit, ask them what they feel they should do with them.
2. Perform the task yourself, without explaining what you're doing or why, and allow trainee to observe you.
3. Explain to trainee what you have just done and place the task within the overall context of the position.
4. Repeat the task again, this time outlining procedures step-by-step, stressing fundamental or key areas.
5. Get trainee to perform the task themselves, repeating aloud the steps you mentioned. Do this as many times as the situation dictates.
6. If physical work is not required, play role reversal. Make the trainee explain to you how the task should be accomplished.

Training Objectives
Write down a scenario for a training task ___________________________________________
_____________________________________________________________________________
_____________________________________________________________________________

Performance Measures
Determine standards for successful completion of task _________________________________
_____________________________________________________________________________
_____________________________________________________________________________





Use our checklist to help you prepare and deliver a one-on-one training plan for new employees. This list is by no means exhaustive of the topics and issues to be covered during training sessions, so customize the sheet however you see fit to ensure that it complies with your company's HR policies and regulations.
Training Environment Completed
Design a training timetable
Clear schedule and as many job duties as possible
Determine a quiet, distraction-free training location
Prepare agenda of topics/issues to be covered on first day
Compile all materials, equipment, and tools necessary for training
Compile finished examples of work to be completed during training

Training Session Steps Completed
1. Present materials and/or training equipment to recruit, ask them what they feel they should do with them.
2. Perform the task yourself, without explaining what you're doing or why, and allow trainee to observe you.
3. Explain to trainee what you have just done and place the task within the overall context of the position.
4. Repeat the task again, this time outlining procedures step-by-step, stressing fundamental or key areas.
5. Get trainee to perform the task themselves, repeating aloud the steps you mentioned. Do this as many times as the situation dictates.
6. If physical work is not required, play role reversal. Make the trainee explain to you how the task should be accomplished.

Training Objectives
Write down a scenario for a training task ___________________________________________
_____________________________________________________________________________
_____________________________________________________________________________

Performance Measures
Determine standards for successful completion of task _________________________________
_____________________________________________________________________________
_____________________________________________________________________________

Posted Tech Plan for E-Rate

https://www.sedl.org/cgi-bin/mysql/eplan/eplan.cgi

ID: 220908
Password: MANSFIELDISD

Technology Plan 2004-2005

Executive Summary
This plan conveys our vision statement, our beliefs about technology, and our K-12 instructional goals as they relate to technology skills. Through this plan we would hope to provide equitable access to the use of technology to enable students to become lifelong learners. Technology in this context includes computers, telephones, electrical, data, and video systems designed and networked, when feasible, to enhance Mansfield Independent School District communication, information processing and productivity needs.

The based on the TEA, NCLB, and E-Rate requirements the Technology Committee developed the following preliminary objectives. Throughout the study, these Goals were addressed; appropriate recommendations for each major area are included in this technology plan.

Goal 1: Teaching and Learning

Teaching & Learning focuses on the instructional needs of teachers and the learning needs of students in meeting the vision of technology in education.

Goal 2: Educator Preparation and Development

Educator Preparation and Development addresses the staff development needs not only of teachers but of all the members of the professional education community.

Goal 3: Infrastructure for Technology

Infrastructure for Technology focuses on hardware, software, and human infrastructure (the capabilities or proficiencies of those who use the technical components). The infrastructure of a school is the critical element of support for all four areas of the Long-Range Plan for Technology. This hardware-and the connecting peripherals such as the network connections and the resulting communications capabilities-enable the system to function properly. The infrastructure provides the foundation for software applications, computer programs such as graphics or spreadsheets, and the TEKS content.

Goal 4: Administration and Support Services

Administration and Support Services addresses the role of the technology leader to create a shared vision, encourage and sustain the appropriate integration of technology, use modern information technology tools to embrace accountability and hence use data for sound decision-making and continual assessment of effective technology for improving student learning.
.


Purpose
Mansfield ISD has prepared this Long-Range Technology Plan to articulate a common vision for technology in the district and identify the strategies that will help us use advanced technology to improve the academic achievement, including technology literacy, of all students of rigorous curriculum standards and the development of critical thinking skills that are essential for academic and workplace success and build the capacity of all teachers to integrate technology effectively into curriculum and instruction.
Background
This plan is based on information drawn from many sources including: (select/identify sources you used)
o A review of the literature to identify best practices
o A survey of school site hardware and instructional media.
o A survey of teachers.
o A survey of administrators
o Interviews with site and district administrators and representatives from the community.
o School site meetings
o Other district technology plans
o Experience from other school districts.
o TEA StarChart
Parameters
This Long-Range Technology Plan is driven by the state curriculum standards and supports the educational mission and instructional goals of Mansfield ISD and by the No Child Left Behind Act of 2001. Specific attention is given to addressing student standards for technology as defined by the Technology Applications Texas Essential Knowledge and Skills (TEKS), required in the Texas Education Code, Section 28.002. The Technology Applications TEKS found in 19 TAC Chapter 126 describe what students should know and be able to do using technology. As a part of the enrichment curriculum, these TEKS are to be used as guidelines for providing instruction. The goal of the Technology Applications TEKS is for students to gain technology-based knowledge and skills and to apply them to all curriculum areas at all grade levels.
The plan stresses the importance of ongoing and sustained staff development in the integration of technology into the curriculum for teachers, principals, administrators, and school library media personnel to further the effective use of technology in the classroom or library media center. It also is consistent with the recommendations for LEAs as defined by the Texas Long-Range Plan for Technology in the areas of Teaching and Learning, Educator Preparation and Development, Administration and Support Services, and Infrastructure for Technology, as well as the e-rate applications guidelines, and other state standards, such as the newly adopted Technology Applications Standards for Beginning Teachers.

Vision Statement
WE BELIEVE: Technology with a Purpose

 Technology allows us to better serve the diverse learning styles of our students and educate them for a wider range of intelligence (e.g., verbal/linguistic, logical/mathematical, visual/spatial, bodily/kinesthetic, musical, interpersonal, and intra-personal.)

 Networked technology systems permit efficient and effective communications within and outside the District.

 Students need to be able to use a wide variety of technological tools to enhance their future success as students and workers.

 It is imperative for all students to have access to information via technology as a basis for lifelong learning.

 It is essential for all learners, including educators, to process and manage information through the skillful use of technology.

 Skillful use of technology supports the development of process skills such as flexibility, adaptability, critical thinking, problem solving and collaboration that are essential to success in our rapidly changing information age.

 It is essential to maximize productivity, funding, E-rate, infrastructure efficiency, to enables schools to better prepare students for future.

Our schools must prepare students for today's workplace and the workplace of the future.

Mission Statement
The education system must prepare students for their futures, not this generation's past. Reflection on the driver for educational restructuring nationally brings a recognition of tension between an education system designed for the industrial age and the reality of an information age.

Technology has changed the very fabric of today's society. It has been a driver of change in such areas as global communications, economics, the arts, politics, and environmental issues. Education must analyze the changing fiber of today's society and weave the reality of the information age into the education system.

Technology is key to learners' achievement of world-class standards. First and foremost is the critical need for students to be able to access information, manipulate data, synthesize concepts and creatively express ideas to others using video, text and audio media. Technology can virtually bring the world to the child, providing a depth and richness of instructional approaches to reach children of all learning modalities. The child becomes a "knowledge architect" using the rich resources at his/her fingertips through technology to bring personal meaning and expression to knowledge.

Secondly, technology is an administrative tool that can bring efficiency to the management and assessment components of education. This is especially important as teachers begin to use performance-based assessment to continuously improve the students' learning. The power of the technology allows easy tracking of student work enabling teachers to develop and maintain individual learning profiles for all learners.

Our changing society and workplace demand citizens who can take responsibility for their own learning and well-being. Educational reforms that can develop these citizens are dependent on the adequate and appropriate infusion of technology to support the new education system.

Demographics
*District Accountability Rating: Recognized
*Total Student Enrollment: 21,318 students
*District Size: 94.5 square miles
*Percent Economically Disadvantaged: 19.3% Free and Reduced
*Total budget: $110 Million
*Number of campuses: 27 campuses
Technology Expenditures: $1.6 Million
*Technology Expenditure Per Pupil: $59.37
*Technology as Percentage of Budget
Number of Campuses with Direct Connection to Internet: All
*Percent of Campuses with Direct Connection to Internet: 100%
Percent of Classrooms with Direct Connection to Internet: 100%
Computer/Student Ratio 5:1
Computer/Teacher Ratio 1:1
Number of campuses completing the Texas Campus STaR Chart: All
*Percent of campuses completing the Texas Campus STaR Chart: 100%

*These items will be filled in automatically by the Texas ePlan system using data reported by the district in the 2002-2003 PEIMS submission and data entered into the Texas Campus STaR website.

General Introduction
Number of schools, students, faculty members, history of the committee, short-term and long-term goals, school's organizational structure, and purpose of the school in the community

Needs Assessment
A comprehensive needs assessment utilizing teacher/student surveys, interviews, focus group sessions, inventories and the Texas Campus STaR Chart was conducted to analyze the current status of technology in the district and determine future needs. Items analyzed included: infrastructure, hardware, software, programs, courses, student achievement, technology resources, staff development, and technical support. Findings from this needs analysis are as follows.
Current Situation
The following technology is currently in place:
District-Wide
o Direct connection to the Internet via T1 and Gigaman line from SBC.
o District web servers in place providing district information.
o Written policies in place on acceptable use of the Internet, World Wide Web content, network management, and equipment donations.
o Distance learning lab available for students, staff, and community members.
o T-STAR satellite receiver used for district training and information.
o Networked online card catalog, Internet access, Texas Library Connection, and automated checkout in the library.
o Four network drops in every classroom.

The High Schools
o Direct connection to the Internet via Gigaman leased line to Administration.
o Web server maintained by the students with high school information and projects.
o Fiber-backbone, Ethernet-to-the-desktop connected computer labs with two Novell 6.5 servers.

The Middle Schools
o Direct connection to the Internet via T1 leased line.
o Web server maintained by the students with middle school information and projects.
o Fiber-backbone, Ethernet-to-the-desktop connected computer labs with Novel file server.
o Networked online card catalog, Internet access, Texas Library Connection, and automated checkout in the library.

The Elementary Campuses
o Direct connection to the Internet via T1 leased line.
o Computer projectors on every campus for classroom checkout.
o All elementary schools have at least one networked computer lab with full-time teaching assistant to aid the staff in technology implementation and training.

Telecommunications Services
Currently, all students and staff members in the school district have access to the Internet, through a direct connection (as cited above in the Statement of Existing Conditions). LANs are in place on every campus.
Inventory
The latest inventory of current technology available for student use in MISD as of January 2004 is given in the chart below. Only current, non-obsolete (Pentium speed or better; at least 128MB RAM; network-capable) student computers are listed. The list does not include administrative computers or file servers.

CAMPUS NUMBER OF STUDENTS TOTAL COMPUTERS STUDENT TO COMPUTER RATIO
Mansfield HS 2700 800 3:1
Summit HS 3400 800
Timberview HS *
Worley MS 1300 250
TA Howard MS 1000 300
Wester MS 1000 300
Danny Jones MS *
D. Shepard IS 800 200
Icenhower IS *
M. Orr IS 1100 300
Brown ES 900 175
Boren ES 600 260
Ponder ES 700 200
Tarvern Rendon ES 500 200
Gideon ES 900 200
Davis ES 700 200
Harmon ES 700 200
Anderson ES 700 200
Reid ES *
Smith ES * 113
Tipps ES 700 120
T. Jone ES 500 120
DP Morris 800 250
Alternative Education Center 120 180
AG Center 25
Ben Barber 400 220
Technology Center 0 25
GRAND TOTALS

Needs
The needs assessment is based on information drawn from the following sources including:

o A review of the literature to identify best practices
o A survey of school site hardware and instructional media.
o A survey of teachers.
o Interviews with site and district administrators and representatives from the community.
o School site meetings
o Other district technology plans
o Experience from other school districts.
o TEA StarChart

Top Issues & Concerns

ß Training and staff development not coordinated with acquisitions
ß How to integrate technology into all curriculum, as required by TEKS
ß Funding futures, Grants, and E-rate to maintain current technology infrastructure.
ß Redesigning for New High Speed Network Access and Connectivity: Giga-MAN
ß How to Replace: 200- switches and hubs that are eight years old; 12 routers, and 2,800 Pentium 200Mhz computers.
ß Obtaining the necessary staff and support to maintain 10,000 computers and printers in 38 locations over 94.5 square miles.
ß Full use and effective use of equipment.
ß Awareness of teachers/staff about what technologies is available.
ß Use of computers in labs vs. classroom
ß Site-based decisions for technology and training
ß Concern about Career and Technology Educational courses keeping up with market and job skill requirements for hardware and software


Defining the New Requirements for Goals, Objectives/Strategies, Timeline, Person(s) Responsible

Goals are observable and measurable expectations for student and teacher use of technologies correlated to the curriculum (TEKS) addressing the four areas of the Long-Range Plan for Technology, 1996-2010: 1) Teaching and Learning, 2) Educator Preparation and Development, 3) Administration and Support Services, 4) Infrastructure for Technology. Goals should focus on results rather than efforts.

Objectives are specific, measurable statements of what is to be accomplished to meet the goals by the end of plan. Objectives must be correlated to NCLB and E-Rate. A budget amount must be allocated for each objective and that expenditure needs to be correlated to one of the four Long-Range Plan for Technology categories [1) Teaching and Learning, 2) Educator Preparation and Development, 3) Administration and Support Services, 4) Infrastructure for Technology]

Strategies are the specific activities that will be conducted to achieve your objectives. All strategies must include a strategy statement, person responsible, timeline, and evidence that will be used to measure success. Strategies must be correlated to the Texas Long-Range Plan for Technology Recommendations.

Timeline states the period of time in which you are to complete the plan or goals; states approximate date(s) for completion of each phase; states major events with the use of graphics (i.e. charts and calendars)

Goals & Objectives:

MISD developed goals and objectives based upon the recommendations defined by the Texas Long-Range Plan for Technology in the areas of Teaching and Learning, Educator Preparation and Development, Administration and Support Services, and Infrastructure for Technology.

Target Area 1: Teaching and Learning
Teaching & Learning focuses on the instructional needs of teachers and the learning needs of students in meeting the vision of technology in education.

Goals that will be addressed include:
1. To improve the academic achievement, including technology literacy, of all students.
2. To integrate technology (including software and electronically delivered learning materials) into curricula and instruction, and utilize a timeline for this integration.

Target Area 2: Educator Preparation and Development

Mansfield ISD will provide Technology Certification for the all MISD employee's. The programs are designed to be self-paced or hands-on classes to allow the best use of individual time. Courses, Test, and demonstrations of proficiency will be provided at each campus by Technology Lead Teachers, the District Trainers, or contracted services after-school, weekends, and during the summer. Course offered by district partners will be counted towards certification. (i.e.: National Semiconductor's “Global Initiative for Internet Access” Region X, or Region XI, TCJC, etc,)


Goals that will be addressed in this area include:
1. To improve the capacity of all teachers to integrate technology effectively into curriculum and instruction.
2. To provide training to identify and promote curricula and teaching strategies that integrate technology effectively into curricula and instruction, based on a review of relevant research and leading to improvements in student academic achievement.
3. To provide ongoing, sustained professional development for: teachers, principals, administrators, and school library media personnel to further the effective use of technology in the classroom and the library media center.

Technology Competencies

As we move into the twenty-first century the definition of a literate citizen will include the ability to use computer technology to access information. It will be essential that a person can manage and manipulate information in a wide variety of formats. To be prepared to function in this new computer generation, students must be taught a new skill set that will make them successful. The development of the skills is the responsibility of the educational system.

To make sure that the teachers in our district are prepared to teach these new skills, the district has developed a Training Plan that will allow all instructional staff and administrators to obtain the skills needed to take them into the twenty-first century.

What are the Technology Competencies?

The Technology Competencies are a set of standards that will allow demonstration of basic computer proficiencies needed to incorporate computer technology through out the entire curriculum. The Technology Competencies are based on the K-8 Technology Application TEKS (Texas Essential Knowledge and Skills) and are designed to give the instructional staff and administrators a tool to enhance their everyday planning. Listed below are the 10 basic competencies:

1. Understanding Technology Issues
2. Basic Computer Skills
3. Setup, Maintenance, And Troubleshooting
4. Word Processing/Desktop Publishing
5. Telecommunication Tools
6. Multimedia Integration
7. Media Communications
8. Database
9. Spreadsheet/Graphing
10. Subject-Specific Design and Learning Diversity

How do you Demonstrate Competency?

The MISD Technology Competencies require performance-based assessments with a wide range of tools and software. This will involve a series of tasks that will show evidence of proficiency in each competency. As a district we have instructional staff and administrators at all levels of competence. In order to use our time and your time effectively we have developed a training plan that will give teachers multiple opportunities to demonstrate the technology competencies. These levels are designed to meet the needs of the teacher as well as the district goal of assuring that all instructional staff and administrators are technologically literate.

The different methods of demonstrating competency will be a collaborative effort of the Academic Technology and Networks Department, Technology Lead Teachers, Campus Technologist, Instructional Staff and Administrators. A checklist (see Appendix A) has been developed for each module and the specific competencies identified.

Competency credit can be obtained at each campus through demonstration of proficiency with the approval of the Lead Teacher and Campus Principal.

Demonstration Program

Demonstration
Demonstrate the skill on the checklist (i.e. Portfolio, Presentation, or Test)
Self-Directed Study
Work through a self-directed study course and demonstrate skills
Training
Take a training class and demonstrate skills

Target Area 3: Administration and Support Services

Administration and Support Services addresses the role of the technology leader to create a shared vision, encourage and sustain the appropriate integration of technology, use modern information technology tools to embrace accountability and hence use data for sound decision-making and continual assessment of effective technology for improving student learning.

The District is currently behind with much less than appropriate technology in the support functions provided. Because instructional management and attendance modules directly impact students, our plan calls for immediate implementation of District-wide solutions in these areas. Other areas of support, such as, personnel, accounting, transportation, purchasing and food service may have to wait until the needs of the schools are met. However, we believe that more solutions exist for these functions in the Windows XP environment and that the eventual need of all users to ultimately interface electronically with these support functions is an important factor in the current decision making process.

Goals that will be addressed include:
1. To provide supporting resources, such as services, software, other electronically delivered learning materials, and print resources, that will be acquired to ensure successful and effective uses of technology.
2. To use technology effectively to promote parental involvement and increase communication with parents.
3. To provide access to adult literacy programs delivered by the district or in collaboration with adult literacy service providers.


Target Area 4: Infrastructure for Technology

Infrastructure for Technology focuses on hardware, software, and human infrastructure (the capabilities or proficiencies of those who use the technical components). The infrastructure of a school is the critical element of support for all four areas of the Long-Range Plan for Technology. This hardware-and the connecting peripherals such as the network connections and the resulting communications capabilities-enable the system to function properly. The infrastructure provides the foundation for software applications, computer programs such as graphics or spreadsheets, and the TEKS content.

We think it advisable to create an environment that will easily allow all users to interface with a common data processing system. It will be easier and cheaper to make the transition to a District-wide network if the hardware installation on the school-wide networks is directly compatible with the current EDP and Region X systems.


The primary goal in this area will be:
1. To ensure that all students and teachers have increased access to technology.
2. To enforce a policy of Internet safety that includes measures to block or filter content for both minors and adults to certain visual depictions

Sustainability and Supporting Resources
Mansfield ISD is committed to sustaining and improving the use of technology to increase the academic performance of all students. Beyond the state technology allotment, the district has contributed local funds in the past for technology enhancements and will continue to do so in the future. The technology staff is also active in working to ensure that all technology equipment functions well and to seek additional funding sources for equipment, services, software, and other electronically delivered learning materials and print resources that will ensure successful and effective uses of technology.

Mansfield ISD is also committed to continuing to increase the number of computer workstations for students and staff until the TEA target equipment ratios are met. These workstations will be purchased out of local and other available funds and will be purchased in mass quantities. This will help us to achieve cost savings due to volume bidding and discounts. The school district is also participating in the E-rate program and has applied for approximately $230,000 in discounts district-wide.

Funding and Alternative Funding

We can no longer teach today's students with yesterday's tools and expect them to succeed in tomorrow's world. Most education focuses on the world of 20 years ago. The future of our children and our society depends on meeting the challenges ahead. MISD is and will continue to:

o Allocation of funding for technology must be a District-wide priority; technology is an essential tool to achieve District goals
o Form a rationale, needs, etc. for future bond issues for infrastructure.
o Plan for continued financial support for purchasing network software, system upgrading, and maintenance
o Forming business partnerships must become a priority
o Pursue support for grant writing


Budget
The budget must include estimated costs with available and potential funding sources for all areas addressed in the plan.
Budget Detail - 2004-2005 (Year 1)
Budget Area Costs Funding Sources
Staff Development
Telecommunications and Internet Access
Materials and Supplies
Equipment
Maintenance
Miscellaneous Expenses
Total
Budget Detail - 2005-2006 (Year 2)
Budget Area Costs Funding Sources
Staff Development
Telecommunications and Internet Access
Materials and Supplies
Equipment
Maintenance
Miscellaneous Expenses
Total
Budget Detail - 2006-2007 (Year 3)
Budget Area Costs Funding Sources
Staff Development
Telecommunications and Internet Access
Materials and Supplies
Equipment
Maintenance
Miscellaneous Expenses
Total


Evaluation
The Evaluation must include:
o the process that will be used to monitor and document progress made in the implementation of the plan including how frequently the plan will be evaluated and updated, who is responsible for evaluating and updating the plan, and how the findings of the evaluation will be communicated and distributed.
o expected results and success indicators for each goal;
o qualitative and quantitative measures; processes and procedures for ongoing evaluation
o a schedule to modify the plan at least once a year
o use of the Campus STaR Chart for each campus in the district for measuring progress.
o process and accountability measures that evaluate the extent to which activities in the plan are effective in:
o integrating technology into curricula and instruction
o increasing the ability of teachers to teach
o enabling students to reach challenging State academic standards
o Acquiring & deploying technologies and telecommunication services
o Meeting timelines for implementation

Evaluation of the Technology Plan will be a systematic ongoing process. All aspects of the Plan will be evaluated formally two times each year in November and May.

The Technology Plan Committee will be responsible for the ongoing evaluation of this plan. The intention of the evaluation will be to make decisions on the impact that technology has on the learning process for all students. A report will be given to the Superintendent and the Board of Trustees after each formal evaluation occurs.

Mansfield ISD's STaR Chart results for each campus will be used to help MISD assess its progress toward meeting the goals of the Long Range Plan for Technology.

Other methods used for evaluation will include:
o Surveys of the staff conducted twice yearly in regards to their use of technology in the classroom
o Informal interviews conducted once a semester by the campus Technology Plan Committee representative
o Records of staff member participation in technology training monitored by sign-in sheets and teacher professional development records.
o Integration of training into the classroom as measured by lesson plans and number and type of technology and distance learning projects.
o Monitoring and documentation of community access to technology resources and information on the campuses and on the web site.
o Monitoring and documentation of community involvement
o Yearly inventory of hardware and software
o Support and maintenance of technology as documented by technical support records

Bibliography
Collection of resources used to compile data such as books, periodicals, contacts, interviews, Internet resources, etc.
Glossary
A list and meanings of all obscure or technical words used throughout the plan
Acceptable Use Policy (See Appendix B)
Guidelines for use of district technologies with a signature page to acknowledge compliance to the policy (Includes requirements by the Children's Internet Protection Act.)

To qualify for E-Rate funding:
Districts must certify that they are enforcing a policy of Internet safety that includes measures to block or filter content for both minors and adults to certain visual depictions as required by The Children's Internet Protection Act (CIPA).

The district must have provided reasonable public notice and have held at least one public hearing to address the proposed Internet Safety Policy. For schools, the policy must also include monitoring the online activities of minors (although schools are not required to track Internet use by any identifiable individual).

Internet Safety Policy. An Internet Safety Policy must address the following:
ß access by minors to inappropriate matter on the Internet and World Wide Web;
ß the safety and security of minors when using electronic mail, chat rooms, and other forms of direct electronic communications;
ß unauthorized access, including so-called “hacking,” and other unlawful activities by minors online;
ß unauthorized disclosure, use, and dissemination of personal information regarding minors; and
ß measures designed to restrict minors' access to materials harmful to minors.

Technology Protection Measure: A Technology Protection Measure is a specific technology that blocks or filters Internet access. It must protect against access by adults and minors to visual depictions that are obscene, child pornography, or - with respect to use of computers with Internet access by minors - harmful to minors. It may be disabled for adults engaged in bona fide research or other lawful purposes.

Copyright

Copyright Policy

Introduction

Mansfield ISD believes in respecting and protecting the rights of intellectual property owners. This is not only a question of ethics, but also of law. Advances in electronic communication and technology, such as the Internet, have had a dramatic impact on the way Mansfield ISD conducts business, and have greatly facilitated our access to a wide range of information and media. As a result, the risk of copyright infringement, either intentional or accidental, is of increasing concern.
The goal of this policy is to inform employees at Mansfield ISD on rules and procedures relating to copyright law compliance.
Referenced Copyright Laws
Copyright Act (Title 17 of the US Code) – Authorized in Article I of the US Constitution, which states that Congress is allowed to pass legislation “to promote the Progress of Science and useful Arts by security for limited Times to Authors and Inventors the exclusive Right to their respective Writings and Discoveries.”
Digital Millenium Copyright Act of 1998 – This law provides recourse for owners of copyrighted materials who believe their rights have been infringed on the Internet.
[If you are from a country other than the United States, please substitute reference to appropriate copyright laws.]

District Copyright Policy

1. Mansfield ISD reserves the right to monitor end user systems and the content stored therein. Mansfield ISD also reserves the right to remove, delete, modify, or otherwise disable access to any materials found to be infringing on copyright.
2. By reading and signing a copy of this policy, an employee of Mansfield ISD will indemnify and hold Mansfield ISD harmless for any breach of this policy or copyright law.
3. No employee of Mansfield ISD may reproduce any copyrighted work in violation of the law. Works are protected by US copyright law even if they were not produced in this country.
4. Copyrighted materials in the US are not required by law to be registered, unlike patents and trademarks, and may not be required to carry the copyright symbol (©). Therefore, a copyrighted work may not be immediately recognizable. Assume material is copyrighted until proven otherwise.
5. If a work is copyrighted, you must seek out and receive express written permission of the copyright holder to reproduce the copyrighted work in order to avoid violation.
6. Copyrighted works include, but are not limited to: text (e.g. articles), images (e.g. photographs), graphics (e.g. logos), sound recordings (e.g. MP3s), video recordings (e.g. movies), or software programs. The following materials are not considered copyrighted materials: ideas, facts, processes, methods, systems, government works, and works in the public domain.
Compliance Procedure
1. If an employee needs help determining if a work is copyrighted or not, or has questions regarding any other copyright issue, he/she should contact [agent name] at [agent contact information].
2. To obtain permission to reproduce a copyrighted work, contact the copyright holder.

Procedure for Copyright Infringement Claims

Employees at Mansfield ISD are encouraged to report all instances of actual or suspected copyright infringement to Mansfield ISD’s copyright agent named below. Employees who violate this policy may be subject to disciplinary action up to an including termination.
In compliance with the Digital Millenium Copyright Act (DCMA), Mansfield ISD will respond to all appropriate notices of copyright infringement. Mansfield ISD may, under appropriate circumstances, remove and/or disable access to material claimed to be infringing upon the intellectual property rights of others.
Please use the following process to notify Mansfield ISD of any copyright issues. Claims of copyright infringement must include all of the following in order to be effective:
1. A physical or electronic signature of a person authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
2. Identification of the copyrighted work claimed to have been infringed, or, if multiple copyrighted works at a single online site are covered by a single claim, a representative list of such works at that online site.
3. Identification of the mateiral that is claimed to be infringing or to be the subject of infringing activity and that is to be removed or access to which is to be disabled, and information reasonably sufficient to permit Mansfield ISD to locate the material.
4. Information reasonably sufficient to permit Mansfield ISD to contact you, such as an address, telephone number, and if available, an electronic mail address where you may be contacted.
5. A statement that you have a good faith belief that the disputed use of the materials is not authorized by the copyright owner, its agent, or the law.
6. A statement that the information in the notice is accurate, and under penalty of perjury, that you are authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.

All claims of copyright infringement should be in writing and should be directed to Mansfield ISD’s designated agent at the following address, phone number, facsimile number, or electronic mail address:

Mansfield ISD
Raymond Jaksa
605 E. Broad Street
Mansfield, Texas 76063
817-473-5348
817-473-5349
rjaksa@mansfieldisd.org

Patch Management Policy

Patch Management Policy
Purpose
Mansfield ISD computers must be properly patched with the latest appropriate updates in order to reduce system vulnerability and protect the entire network from malicious attack. The purpose of this policy is to establish standard procedures for the identification of Mansfield ISD system vulnerabilities, as well as the safe and timely installation of vulnerability patches.
Scope
This policy applies to all servers, desktops, and laptops computers owned and operated by Mansfield ISD.
Patching Priorities
The following Patch Priority Matrix represents all systems at Mansfield ISD, their relative priority for vulnerability patching, and timeframes within which patches must be applied (i.e. Immediate, 7 days, 14 days, or 30 days).
Application Application Criticality High Priority Patch Moderate Priority Patch Low PriorityPatch
[Name/Type] [High/Medium/Low] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days]
[Name/Type] [High/Medium/Low] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days]
[Name/Type] [High/Medium/Low] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days]
[Name/Type] [High/Medium/Low] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days]
[Name/Type] [High/Medium/Low] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days]
[Name/Type] [High/Medium/Low] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days] [Immediate/7 days/ 14 days/ 30 days]


Policy
1. Vulnerability assessment and system patching will only be performed by designated individuals. These individuals are [name staff members or roles].
2. All server, desktop, and laptop systems, including all hardware and software components, must be accurately listed in the IT Department asset inventory to aid in patching efforts.
3. Vulnerability scanning of systems will take place [list times]. Mansfield ISD uses the following tools to scan its systems for security vulnerabilities: [list tools used for servers, desktops, and laptops]. Mansfield ISD systems will be scanned for vulnerabilities with the following frequency:
· Servers will be scanned [name frequency].
· Desktops will be scanned [name frequency].
· Laptops will be scanned [name frequency].
4. The following information sources will be taken as primary authorities on existing and new system vulnerabilities. These sources must be monitored by assigned IT personnel on an ongoing basis.
· [Name information source].
· [Name information source].
· [Name information source].
5. Each vulnerability alert must be checked against existing Mansfield ISD systems and services prior to taking any action in order to avoid unnecessary patching. Read all alerts very carefully – not all patches are related to vulnerability issues or actual system versions present at [Company Name].
6. The decision to apply a patch, and within what timeframe, must be done following the guidelines presented in the Patch Priority Matrix above.
7. All patches must be downloaded from the relevant system vendor or other trusted sources. Each patch’s source must be authenticated and the integrity of the patch verified. All patches must be submitted to an anti-virus scan upon download.
8. New servers and desktops must be fully patched before coming online in order to limit the introduction of risk.
9. All patches must be tested prior to full implementation since patches may have unforeseen side effects. [Describe testing procedure using either a dedicated test network or non-critical machines.]
10. A backout plan that allows safe restoration of systems to their pre-patch state must be devised prior to any patch rollout in the event that the patch has unforeseen effects.
11. Patches will be applied according to the following schedule: [describe patching schedule such that it provides minimal disruption to business activities].
12. Rollout of tested patches will adhere to the following procedure: [describe tiered rollout procedure, including all automated systems used].
13. All configuration and inventory documentation must be immediately updated in order to reflect applied patches.
14. Audits will be performed to ensure that patches have been applied as required and are functioning as expected.
Enforcement
Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination.

Downtime

Downtime Policy
Purpose
Mansfield ISD is committed to ensuring reliable information technology services. In order to meet this objective, Mansfield ISD systems may need to be taken offline to maintain or improve system performance, safeguard data, or to respond to emergency situations.
The goal of this policy is to explain those circumstances during which downtime may occur, anticipated durations of downtime events, and procedures for notifying affected users.
Planned Downtime
From time to time, it will be necessary to make systems unavailable for the purpose of performing upgrades, maintenance, or housekeeping tasks. The goal of these tasks to is to ensure maximum system performance and prevent future system failures. The following activities fall within the definition of Planned Downtime:
· Application of patches to operating systems and other applications in order to fix vulnerabilities and bugs, add functionality, or improve performance.
· Monitoring and checking of system logs.
· Security monitoring and auditing.
· Disk defragmentation, disk cleanup, and other general disk maintenance operations.
· Required upgrades to system physical memory or storage capacity.
· Installation or upgrade of applications or services.
· System performance tuning.
· Regular backup of system data for the purpose of disaster recovery.
In the event that any of these activities will require downtime to perform, every effort will be made to perform the procedure during off-hours in order to minimize the impact on those who use the affected systems or services. The following time periods will be used to carry out Planned Downtime activities:
· [List day and hours]
· [List day and hours]
· [List day and hours]
On occasion, it may be necessary to have Planned Downtime during regular business hours, namely if outside personnel are required to perform more elaborate procedures. If this is the case, then this Planned Downtime will be communicated to identified users of affected resources using the Notification of Downtime mechanism described below.
Emergency Downtime
Unexpected circumstances may arise where systems or services will be interrupted without prior notice. Every effort will be made to avoid such circumstances. However, incidences may arise involving a compromise of system security, the potential for damage to equipment or data, or emergency repairs. If the affected system(s) cannot be brought back online with [insert time duration], affected users will be contacted via the Notification of Downtime mechanism described below.
Notification of Downtime
Users will be notified of downtime according to the following procedure:
· The system administrator for the system in question is responsible for notifying all identified users of Planned Downtime, as well as any unplanned interruptions to system availability as they occur.
· The system administrator will first notify all affected users via [name primary notification method, such as e-mail]. [Describe any other standard notification methods, such as an intranet bulletin board.] All users are responsible for checking [name primary notification method] for downtime and system status notifications. In the event that the [name primary notification system] is unavailable due to Emergency Downtime, the system administrator will contact department heads by [describe alternate notification method, such as telephone] to inform them of the situation.
· If general maintenance procedures will cause Planned Downtime during regular business hours, and the procedure will last less than [insert time duration], then the system administrator must notify system users [insert time duration] prior to the Planned Downtime.
· If Planned Downtime beyond general maintenance is scheduled that will last longer than [insert time duration], then the system administrator must give [insert number] business days notice for every day of anticipated system unavailability. This step must be taken regardless of whether the downtime is scheduled to take place during off hours or regular business hours.
· In the event of Emergency Downtime, the system administrator will use his/her discretion in notifying end users of the situation. In emergency circumstances where time is of the essence, it may not be possible for the system administrator to engage in normal downtime notification activities. When emergency measures are completed, or if [insert time duration] has elapsed with no resolution, then the system administrator will contact all users with information on system status and/or information on additional expected downtime.
All downtime announcements will provide the following information:
· Systems and services that are affected, as well as suggested alternatives to them (if any).
· Start and end times of the Planned Downtime period, or estimated time to recovery in the event of Emergency Downtime.
· The reasons why the downtime is taking place.
· Any ongoing problems that are anticipated as a result of the downtime event.
Requests for Availability
If you foresee critical need of a system during a period of Planned Downtime, then contact [insert contact name and information] in advance to make an appeal. The utmost effort will be made to reschedule the downtime or make alternative arrangements for required resources.

E-mail AUP

E-Mail Acceptable Use Policy
E-mail is a critical mechanism for business communications at Mansfield ISD. However, use of Mansfield ISD’s electronic mail systems and services are a privilege, not a right, and therefore must be used with respect and in accordance with the goals of Mansfield ISD.
The objectives of this policy are to outline appropriate and inappropriate use of Mansfield ISD’s e-mail systems and services in order to minimize disruptions to services and activities, as well as comply with applicable policies and laws.
Scope
This policy applies to all e-mail systems and services owned by Mansfield ISD, all e-mail account users/holders at Mansfield ISD (both temporary and permanent), and all District e-mail records.
Account Activation/Termination
E-mail access at Mansfield ISD is controlled through individual accounts and passwords. Each user of Mansfield ISD’s e-mail system is required to read and sign a copy of this E-Mail Acceptable Use Policy prior to receiving an e-mail access account and password. It is the responsibility of the employee to protect the confidentiality of their account and password information.
· ONLY employees of Mansfield ISD are entitled to an e-mail account.
Applications for these accounts must be submitted in writing to [insert contact name and contact information]. All terms, conditions, and restrictions governing e-mail use must be in a written and signed agreement.
E-mail access will be terminated when the employee terminates their association with Mansfield ISD, unless other arrangements are made. Mansfield ISD is under no obligation to store or forward the contents of an individual’s e-mail inbox/outbox after the term of their employment has ceased.
General Expectations of End Users
Important official communications are often delivered via e-mail. As a result, employees of Mansfield ISD with e-mail accounts are expected to check their e-mail in a consistent and timely manner so that they are aware of important District announcements and updates, as well as for fulfilling business- and role-oriented tasks.
E-mail users are responsible for mailbox management, including organization and cleaning. If a user subscribes to a mailing list, he or she must be aware of how to remove himself or herself from the list, and is responsible for doing so in the event that their current e-mail address changes.
E-mail users are also expected to comply with normal standards of professional and personal courtesy and conduct.
Appropriate Use
Individuals at Mansfield ISD are encouraged to use e-mail to further the goals and objectives of Mansfield ISD. The types of activities that are encouraged include:
· Communicating with fellow employees, business partners of Mansfield ISD, and clients within the context of an individual’s assigned responsibilities.
· Acquiring or sharing information necessary or related to the performance of an individual’s assigned responsibilities.
· Participating in educational or professional development activities.
Inappropriate Use
Mansfield ISD’s e-mail systems and services are not to be used for purposes that could be reasonably expected to cause excessive strain on systems. Individual e-mail use will not interfere with others’ use and enjoyment of Mansfield ISD’s e-mail system and services. E-mail use at Mansfield ISD will comply with all applicable laws, all Mansfield ISD policies, and all Mansfield ISD contracts.
The following activities are deemed inappropriate uses of Mansfield ISD systems and services and are prohibited:
· Use of e-mail for illegal or unlawful purposes, including copyright infringement, obscenity, libel, slander, fraud, defamation, plagiarism, harassment, intimidation, forgery, impersonation, soliciting for illegal pyramid schemes, and computer tampering (e.g. spreading of computer viruses).
· Use of e-mail in any way that violates Mansfield ISD’s policies, rules, or administrative orders, including, but not limited to, [list any applicable code of conduct policies, etc.].
· Viewing, copying, altering, or deletion of e-mail accounts or files belonging to Mansfield ISD or another individual without authorized permission.
· Sending of unreasonably large e-mail attachments. The total size of an individual e-mail message sent (including attachment) should be [insert size in KBs] or less.
· Opening e-mail attachments from unknown or unsigned sources. Attachments are the primary source of computer viruses and should be treated with utmost caution.
· Sharing e-mail account passwords with another person, or attempting to obtain another person’s e-mail account password. E-mail accounts are only to be used by the registered user.
· Excessive personal use of Mansfield ISD e-mail resources. Mansfield ISD allows limited personal use for communication with family and friends, independent learning, and public service so long as it does not interfere with staff productivity, pre-empt any business activity, or consume more than a trivial amount of resources. Mansfield ISD prohibits personal use of its e-mail systems and services for unsolicited mass mailings, non-Mansfield ISD commercial activity, political campaigning, dissemination of chain letters, and use by non-employees.
Monitoring and Confidentiality
The e-mail systems and services used at Mansfield ISD are owned by the District, and are therefore its property. This gives Mansfield ISD the right to monitor any and all e-mail traffic passing through its e-mail system. While the District does not actively read end-user e-mail, e-mail messages will be read by IT staff during the normal course of managing the e-mail system.
In addition, backup copies of e-mail messages may exist, despite end-user deletion, in compliance with Mansfield ISD’s records retention policy. The goals of these backup and archiving procedures are to ensure system reliability and prevent business data loss.
If Mansfield ISD discovers or has good reason to suspect activities that do not comply with applicable laws or this policy, e-mail records may be retrieved and used to document the activity in accordance with due process. All reasonable efforts will be made to notify an employee if his or her e-mail records are to be reviewed. Notification may not be possible, however, if the employee cannot be contacted, as in the case of employee absence due to vacation.
Use extreme caution when communicating confidential or sensitive information via e-mail. Keep in mind that all e-mail messages sent outside of Mansfield ISD become the property of the receiver. A good rule is to not communicate anything that you wouldn’t feel comfortable being made public. Demonstrate particular care when using the “Reply” command during e-mail correspondence.
Reporting Misuse
Any allegations of misuse should be promptly reported to [insert name of contact and contact information]. If you receive an offensive e-mail, do not forward, delete, or reply to the message. Instead, report it directly to the individual named above.
Disclaimer
Mansfield ISD assumes no liability for direct and/or indirect damages arising from the user’s use of Mansfield ISD’s e-mail system and services. Users are solely responsible for the content they disseminate. Mansfield ISD is not responsible for any third-party claim, demand, or damage arising out of use the Mansfield ISD’s e-mail systems or services.
Failure to Comply
Violations of this policy will be treated like other allegations of wrongdoing at Mansfield ISD. Allegations of misconduct will be adjudicated according to established procedures. Sanctions for inappropriate use on Mansfield ISD’s e-mail systems and services may include, but are not limited to, one or more of the following:
1. Temporary or permanent revocation of e-mail access;
2. Disciplinary action according to applicable Mansfield ISD policies;
3. Termination of employment; and/or
4. Legal action according to applicable laws and contractual agreements.
E-Mail User Agreement
I have read and understand the E-Mail Acceptable Use Policy. I understand if I violate the rules explained herein, I may face legal or disciplinary action according to applicable laws or District policy.
Name: _______________________________________________
Signature: ____________________________________________
Date: ________________________________________________

Backup Policy

A. Introduction
1. High-Level Considerations
In an age when security is becoming more and more important, it is essential for an organization to document their policy with regard to backing up their computer data. However, once the policy is written, it also needs to be implemented and consistently monitored to ensure compliance.
Every organization, department and user needs to personalize the backup plan. Otherwise, it is very likely not to be consistently executed.
An effective backup strategy must take into consideration the importance and time-sensitivity of the data. As a start, answers to the following questions will help in the planning of your strategy, for each computer:
· What files / directories / computers have been identified as “mission critical”? (What files / directories / computers do not need to be backed up?)
· How quickly do you need to resume operations after a complete loss of this computer?
· How quickly do you need to resume operations after a partial loss?
· How many extra copies of the backups must you have to feel “safe”?
· How long do you need to keep each backup?
· Who will monitor user compliance with regard to this policy?
· What resources is your organization willing to commit in order to guarantee consistent compliance?

2. Backup Media
Depending on the nature of the files being backed up, any of the following media may be used: 3.5” floppy diskette, ZIP drive, CD, DVD, tape, external hard drive, a third party provider of an online backup service, or the company’s central server designated for this purpose.

3. Occasional Restoring from Backup
There are quite a few ways in which a file that seems to have backed up correctly may not be restorable. The procedure for restoring should be clear, and at least one file from a physical location near the end of the medium should be restored from time to time. The only way to be 100% positive that a particular backup is restorable, is to have restored from it.

4. Accountability
The requirements for backup will vary depending on many factors. It is the responsibility for each computer user to write and implement his/her own backup strategy. It should indicate:
· The frequency of backups
· The type of backup created (full or incremental)
· The backup software / medium used
· The location of off-site backup copies
· The nature of logs kept

5. Backup Labels and Logs

Each backup label should have at a minimum, the date and type of backup. Other information on the label could include file and/or directory names, the person who did the backup, and a “keep until” date.

Depending on the nature of the data, a log should be kept of every backup, including date, time, type, person who did the backup, and any other information that is relevant. This log should be available for review by management from time to time.
6. Process
A personalized plan should be written by every computer user, at every level of the organization, in consultation with that individual’s supervisor. The process might include steps such as:
· List critical files.
· Discuss sound file management practices, including copying the latest version of all critical files into a central folder.
· Identify the appropriate means and frequency of backing up.
· Name the individual who is responsible to review backup logs and ensure compliance with this policy.

B. Sample Central Server Backup Policy
1. Preamble: The backups performed by the System Administrator are absolutely critical as an “insurance policy” against natural disaster, virus attack, theft or equipment failure. Statistics are very sobering: Most companies who for whatever reason lose all their data and don’t have a backup, will fail within two years.

2. Backup Schedule
Desktop and server backup routines run each night (Sun.-Fri.) at 11pm. All desktop systems that are missed in the regular nightly backup will be backed-up starting at Noon the following day (Mon.-Sat.).

3. Backup Retention Policy
Tapes are kept for seven days before they are over-written, with the exception of the Sunday tapes. One Sunday tape set from each month will be kept indefinitely, while the others will be kept for three months.

4. Backup Inventory
Below you will find a list of all desktop computers and directories being backed up automatically on a nightly basis. To confirm that your files are being properly backed up each night please check this list for your computer.

Note:
You do NOT need to remain logged into your system overnight for the backup to run successfully. However, if your computer is shut down or disconnected from the network while the backup runs (if you have a laptop which you take home, for example) your system will not be backed up.


C. Personal Computer Backup Policy

1. Preamble: Each individual who uses a computing device not backed up by the System Administrator is responsible to create and faithfully implement a backup plan, based on the nature of the information on that device. While some variation can be expected, a minimum level of backing up should be mandated at the department or company level, for every computer user.

2. Backup Types

A full backup must be created at least once per month, and more frequently depending on the nature of the data files. An incremental backup (saving only the files that have changed since the last backup) may be used for other backups.

3. Backup Retention
At least three different backup copies should be available at all times, one of which should be physically stored in a different location from the others. The “off-site” backup should never be older than one month.

A different medium (e.g. diskette, tape, CD, hard drive folder) should be used for every day of the week. Additionally, depending on the nature of the data, one medium (CD, hard drive folder, etc.) should be designated as a monthly backup and kept for at least three months. It is also recommended to keep a year-end backup, indefinitely.

4. Sample home notebook computer backup plan:

· Daily backup of critical files A, B, C and D via zip drive. The latest version of each of these files is copied to a central folder, “Backed-Up”, which is saved to a different medium each day.
· The Monday backup is placed in my briefcase and taken to work on Tuesday. Every Tuesday evening I bring home the previous week’s backup.
· The Weekly backup of local directories and files is done using the online backup service.
· A Full backup, using the online service, is completed monthly.
· A log of each backup is written in my daytimer

Antivirus Policy

Anti-Virus Policy
Purpose
A virus is a piece of potentially malicious programming code that will cause some unexpected or undesirable event. Viruses can be transmitted via e-mail or instant messaging attachments, downloadable Internet files, diskettes, and CDs. Viruses are usually disguised as something else, and so their presence is not always obvious to the computer user. A virus infection can be very costly to Mansfield ISD in terms of lost data, lost staff productivity, and/or lost reputation.
As a result, one of the goals of Mansfield ISD is to provide a computing network that is virus-free. The purpose of this policy is to provide instructions on measures that must be taken by Mansfield ISD employees to help achieve effective virus detection and prevention.
Scope
This policy applies to all computers that are connected to the Mansfield ISD network via a standard network connection, wireless connection, modem connection, or virtual private network connection. This includes both company-owned computers and personally-owned computers attached to the Mansfield ISD network. The definition of computers includes desktop workstations, laptop computers, handheld computing devices, and servers.
General Policy
1. Currently, Mansfield ISD has SOPHOS Antivirus software. Licensed copies of SOPHOS can be obtained at by logging into Novell as sophos with no password. The most current available version of the anti-virus software package will be taken as the default standard.
2. All computers attached to the Mansfield ISD network must have standard, supported anti-virus software installed. This software must be active, be scheduled to perform virus checks at regular intervals, and have its virus definition files kept up to date.
3. Any activities with the intention to create and/or distribute malicious programs onto the Mansfield ISD network (e.g. viruses, worms, Trojan horses, e-mail bombs, etc.) are strictly prohibited.
4. If an employee receives what he/she believes to be a virus, or suspects that a computer is infected with a virus, it must be reported to the IT department immediately at [provide contact information]. Report the following information (if known): virus name, extent of infection, source of virus, and potential recipients of infected material.
5. No employee should attempt to destroy or remove a virus, or any evidence of that virus, without direction from the IT department.
6. Any virus-infected computer will be removed from the network until it is verified as virus-free.

Rules for Virus Prevention
1. Always run the standard anti-virus software provided by MISD.
2. Never open any files or macros attached to an e-mail from an unknown, suspicious, or untrustworthy source.
3. Never open any files or macros attached to an e-mail from a known source (even a coworker) if you were not expecting a specific attachment from that source.
4. Be suspicious of e-mail messages containing links to unknown Web sites. It is possible that the link is a malicious executable (.exe) file disguised as a link. Do not click on a link sent to you if you were not expecting a specific link.
5. Files with the following filename extensions are blocked by the e-mail system: exe, BLAH, BLAH. BLAH.
6. Never copy, download, or install files from unknown, suspicious, or untrustworthy sources or removable media.
7. Avoid direct disk sharing with read/write access. Always scan a floppy diskette for viruses before using it.
8. If instructed to delete e-mail messages believed to contain a virus, be sure to also delete the message from your Deleted Items or Trash folder.
9. Back up critical data and systems configurations on a regular basis and store backups in a safe place.
10. Regularly update virus protection on personally-owned home computers that are used for business purposes. This includes installing recommended security patches for the operating system and other applications that are in use.
IT Department Responsibilities
The following activities are the responsibility of the Mansfield ISD IT department:
1. The IT department is responsible for maintaining and updating this Anti-Virus Policy. Copies of this policy will be posted at [list website locations and campus library]. Check one of these locations regularly for updated information.
2. The IT department will keep the anti-virus products it provides up-to-date in terms of both virus definitions and software version in use. The updates will be daily or more as needed. The updates are provided from SOPHOS on an as needed basis.
3. The IT department will apply any updates to the services it provides that are required to defend against threats from viruses.
4. The IT department will install anti-virus software on all Mansfield ISD owned and installed desktop workstations, laptops, and servers.
5. The IT department will not assist employees in installing anti-virus software according to standards on personally-owned computers that will be used for business purposes. The IT department will not provide anti-virus software in these cases.
6. The IT department will take appropriate action to contain, remove, and assist in recovery from virus infections. In order to do so, the IT department may be required to disconnect a suspect computer from the network or disconnect an entire segment of the network.
7. The IT department will perform regular anti-virus sweeps of all files.
8. The IT department will attempt to notify users of Mansfield ISD systems of any credible virus threats via e-mail or telephone messages. Virus reports will not be acted upon until validated. Employees should not forward these or any virus warning messages in order to keep network traffic to a minimum.
Department and Individual Responsibilities
The following activities are the responsibility of Mansfield ISD departments and employees:
1. Departments must ensure that all departmentally-managed computers have virus protection that is in keeping with the standards set out in this policy.
2. Departments that allow employees to use personally-owned computers for business purposes must implement virus protection processes and procedures that are in keeping with the standards set out in this policy.
3. All employees are responsible for taking reasonable measures to protect against virus infection.
4. Employees must not attempt to either alter or disable anti-virus software installed on any computer attached to the Mansfield ISD network without the express consent of the IT department.
Enforcement
Any employee who is found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.
Declaration of Understanding
I, have read, understand, and agree to adhere to MISD’s Anti-Virus Policy.
Name (Printed): __________________________________
Name (Signed): __________________________________
Today’s Date: __________________________________

District Guidelines for Web Design

Mansfield ISD
Web Requirements & Guidelines

A. Protocol/Responsibility
B. Requirements
C. Web Publishing Recommendations
D. Web Technologies Supported on District Server(s)

A. Protocol/Responsibility

1. Each campus/department/teacher is responsible for the development and update of the pages of their site.

2. The principal/director of each campus or department must designate a district employee to be responsible for coordinating web site creation and maintenance for a campus/department site.

3. Each school is responsible for checking the non-disclosure list on your campus prior to posting any student’s name, picture, art, written work, voice, verbal statements or portraits (video or still) for campus web pages.

4. The principal or director is responsible for final approval of all content of campus or department pages. This may be directly or through a designee that is an employee of the campus or department. Web page files will be posted to the district web server by the district webmaster. At no time are files to be posted that are submitted directly by students.

B. Requirements

1. Pages that contain time-sensitive information, such as calendars, school events, staff information, etc., must be updated as changes occur to insure current, accurate information.

2. Web pages must be checked twice monthly to make sure that links work.

3. All Web pages must have a title (which appears on the Web browser’s title bar).

4. Each school or department web site must include the school or department name, address, phone number, a link to the home page of www.mansfieldisd.org, and a school or department contact including the contact’s MISD email address.

5. Each page must (at minimum) contain a link back to the previous level in the school’s site, and a link to the site’s main navigational page.


6. The Mansfield Independent School District Web Servers are for educational use only. Contents of the site should give information and promote only district and campus endorsed activities (Classes, services, staff, departments, sports, school projects, calendars, volunteering opportunities, etc.).

7. Teachers will be trained to create teacher web pages and post them automatically. If any teacher wishes to use more advanced web creation tools for teacher web pages, they need to communicate that desire to the Campus Technologist. Arrangements will be made with the Technology Department on a case-by-case basis.

Commercial Links and External Links
(Links to sites and content that is not hosted on an official MISD Web Server)

· Certain fundraising information and links may be allowed, such as "shopforschool.com" or "schwans.com". These company links may be allowed with approval from the business department and the appropriate principal or director.

· Certain commercial links that provide information on purchases to staff and/or students, such as school rings, graduation announcements, athletic items, etc., may be allowed with approval from the business department and the appropriate principal or director.

· All other commercials, commercial transactions, or advertisements are prohibited on school pages.

· Curriculum-based educational links, including commercial links, should be allowed as approved by the building principal or department director.

· PTA’s & PTO’s will be allowed to post web pages on campus sites. Any submission created by a non-district employee must be submitted to the Campus Web Author for principal approval. The submission must be on portable media (CD, floppy, Zip disk) and in the DreamWeaver web extension format available for Publishing to the Web.

· Booster clubs will not be allowed on MISD web sites. You may not create a link to a booster site.

· All official school and district sites must be hosted on Mansfield ISD web servers, which are operated by the Technology Department, and use the district URL.

· Files hosted on the Mansfield ISD Web Server(s) and hyperlinks from these files should not contain information that is in violation of (or promotes the violation of) any district policy or regulation nor any local, state, or federal regulation or law.

· The following student information is generally acceptable to include, if parent(s) have given permission/consent for use per district release form, on a district web page.

· Elementary students: Student’s picture or work with first name, or first name and last initial only.

· Secondary students: Student’s picture or work with first and last name, or first name and last initial, or first name.

· No other personal information about a student is allowed, such as email address, phone number, home address.

· Unauthorized use of copyrighted material is prohibited. Legal use of copyrighted material must be accompanied by credit for the material (this is any material with the © insignia attached).

· “Hit counters” are permissible but cannot be visible on the entry page of a school’s web site.

The following items are prohibited:

· Personal information about staff and parent volunteers: non-district email addresses, non-district mailing address, and non-district phone numbers except as approved by the building principal. Example: PTSO/PTA/Booster Organization officer/contact requests to have their personal email address listed in the appropriate area on the school's page(s) and principal approves the request. Note: Pictures and names of staff and parent volunteers will be allowed with principal’s approval.

· Student personal contact information of any kind

· Links to staff, volunteer, or student personal home pages

· Any content that is not accessible from inside the MISD network through the Internet filter (example: chat rooms, message boards, guest books)

· All pages must comply with local, state, and federal privacy laws.

D. Web Publishing Recommendations

1. Use a consistent style on the school’s or department’s main pages. (Individual departments, grade levels, programs, etc. may vary, but the administrative and general information pages should maintain consistency in look and navigation.)

2. Pages should be sized so they will display properly in a variety of screen resolutions.

3. Pages should be previewed and tested at least at "800 x 600" and "1024 x768". The web site is not required to support a resolution of “640 x 480”.

4. Regular text entries on web pages should be limited to the fonts "Arial", "Times New

5. Roman", and “Courier New”. Any special fonts should be saved and used as graphics to ensure that they display properly. All graphics should be in .jpg or .gif format.

6. Avoid color schemes or backgrounds that make the information on the page hard to read, especially black. Document colors should be "web safe" as much as possible. Avoid using white text or links (white is difficult to print).

7. Graphics should be used judiciously. Each page (including graphics) should not exceed 50K except in rare situations. Intranet pages can be given special consideration.

8. Animated GIF files should be used very sparingly and need to be relatively small. Loop iteration should be limited; animated GIFs should never loop indefinitely. The amount, size, and type of graphics used have the most direct affect on the "load time" of web pages.

9. Video and audio files may be used when they are appropriate and are compressed properly. They are generally large files that take long "load times" for the user, and many times require some users (non-district networked machines) to have special plug-ins or viewers/players, in order to view or hear the files.


Web Technologies Supported on District Server(s)

The district web server does not support "cgi" script.

The district web server does support Microsoft Front Page extensions.

All district-networked computers utilize Java capable browsers.

All district networked computers have the following plug-ins loaded:

Windows Media Player Plugin (in addition, Windows MediaPlayer is also loaded as an application)

Macromedia Shockwave

Macromedia Flash

QuickTime Plugin for Windows

NPAVI Dynamic Link Library (avi Plugin)

Adobe Acrobat Reader

IS IT FAIR USE?

IS IT FAIR USE?

"To determine whether a use is fair requires consideration of four factors," Willard added. "The first factor is the purpose of the copying, and copying to support an educational use certainly meets this standard. There are three other factors, though: how much has been copied, what kind of material has been copied, and the potential financial loss to the creator. So, although your heart and intentions may be pure, the other factors must still be considered."
Those factors, codified in Section 107 of the Copyright Act of 1976, are
1. the purpose and character of the use, including whether such use is of a commercial nature or is for nonprofit educational purposes.
2. the nature of the copyrighted work.
3. the amount and substantiality of the portion used in relation to the copyrighted work as a whole.
4. the effect of the use upon the potential market for or value of the copyrighted work.
When evaluating a particular use of copyrighted materials in relation to those four factors, you should ask yourself the following questions regarding
1. the purpose and character of the use:
· Does the new work transform the original work or offer something beyond the original? Copyrighted works that are altered significantly are more likely to be considered fair use.
· Is the use for nonprofit or educational purposes? Copyrighted works used for nonprofit or educational purposes are more likely to be considered fair use.
2. the nature of the copyrighted work:
· Is the copyrighted work published or unpublished? Published works are more likely to be considered fair use.
· Is the original work out of print? Out of print works are more likely to be considered fair use.
· Is the copyrighted work factual or creative? Factual works are more likely to be considered fair use.
3. the amount and substantiality of the portion used in relation to the copyrighted work as a whole:
· Is the amount of the original work used reasonable? The smaller the percentage of the work used, the more likely it is to qualify as fair use.
· Is the section of the original work used the most important part of the work? The less significant the portion of the work used, the more likely it is to be considered fair use.
4. the effect of the use upon the potential market for or value of the copyrighted work:
· Does the new work appeal to the same audience as the original work? Copyrighted works that are used for another purpose or designed to appeal to a different audience are more likely to be considered fair use.
GUIDELINES FOR EDUCATORS
"Over the years, librarians, educators, and publishers have developed voluntary guidelines to address fair use," Willard told Education World. "Although these guidelines are not statutory, they are contained in the legislative history of the Copyright Act."
Those guidelines allow educators, under most circumstances, to copy
· a single chapter from a book
· an excerpt from a work that combines language and illustrations, such as a children's book, not exceeding two pages or 10 percent of the work, whichever is less
· a poem of 250 words or less or up to 250 words of a longer poem
· an article, short story, or essay of 2,500 words or less, or excerpts of up to 1,000 words or 10 percent of a longer work, whichever is less; or
· a single chart, graph, diagram, drawing, cartoon, or picture from a book, periodical, or newspaper.
The guidelines do not allow users to
· make multiple copies of different works as a substitute for the purchase of books or periodicals
· copy the same works for more than one semester, class, or course
· copy the same work more than nine times in a single semester
· use copyrighted work for commercial purposes
· use copyrighted work without attributing the author.


MUSIC, TV, AND VIDEOTAPES
Educational technology existed, of course, -- in the form of audio and video -- long before the Internet, software, digital images, and multimedia productions invaded our classrooms. Guidelines for the use of such "primitive" technologies were developed.
The guidelines developed in 1976 for the educational use of music include the following:
· Multiple copies of sheet music may be copied in an emergency (for an imminent performance) to replace purchased copies that are not available, provided purchased replacement copies are substituted as soon as possible.
· For academic purposes other than performance, multiple copies of excerpts of works may be made, provided the excerpts don't include more than 10 percent of the whole work or make up a part of the whole that would constitute a performable unit, such as a section, a movement, or an aria. The number of copies may not exceed one copy per student.
· For academic purposes other than performance, a single copy of an entire performable unit (section, movement, aria, etc.) may be made if the unit is out of print or available only in a larger work.
· Sheet music that has been purchased may be edited or simplified if the fundamental character of the work is not distorted and that lyrics are not altered or added.
· A single copy of a sound recording of a student performance may be made for evaluation or rehearsal purposes and may be retained by the educational institution or individual teacher.
· A single copy of a sound recording of copyrighted music may be made from sound recordings owned by an educational institution or an individual teacher for the purpose of constructing aural exercises or examinations and may be retained by the educational institution or individual teacher.
· Copying to create, replace, or substitute for anthologies, compilations, or collective works; copying works intended to be consumable, such as workbooks, exercises, or standardized tests; copying for the purpose of performance (except in an emergency); copying as a substitute for purchase; and copying without the inclusion of the copyright notice are not permitted.
In 1981, a congressional subcommittee developed guidelines for off-air taping of television and radio broadcasts for educational use. Those guidelines allow educators to tape a radio or television broadcast for instructional (not entertainment) use if
· the program is recorded simultaneously with the broadcast.
· the program is being broadcast without charge.
· the program is recorded only in response to a specific request.
· the program is recorded (but not necessarily used) in its entirety.
· the program is not altered.
· the tape is retained by the educational institution for no longer that 45 days after the date of the recording.
· the tape is used only once with each class during the first ten consecutive school days of the 45-day retention period.
· the tape is used from the tenth to the 45th day of the retention period for teacher-evaluation purposes only.
In addition, guidelines established in 1976 allow educators who have bought or rented videocassettes designated for home use only to use those videocassettes for face-to-face student instruction -- but not for student entertainment.
IS PRISON IN YOUR FUTURE?
Obviously, copyright law is complicated and easily misinterpreted. Even those with the best intentions -- and the best lawyers -- are liable to make mistakes.
The Copyright Website provides some fascinating examples of some big names who made costly copyright errors.
So what are the chances you'll find yourself in court? Pretty slim -- although they increase dramatically if your use of a work interferes with the owner's potential income. Most copyright owners don't want to take teachers or school systems to court. They just want to stop the copyright infringement. If you make a mistake in good faith and you're asked to stop using a particular work, do so immediately.
In addition, Nancy Willard offers the following recommendations to help teachers and school districts avoid problems:
· Use public domain resources whenever possible. Materials created by the federal government are all public domain, and many public agencies have created educational materials.
· Develop collaborative efforts with other teachers to create and disseminate public domain materials for educational use.
· Ask permission, and teach students to ask permission, before using any material about which there is a question.

EDUCATION WORLD'S COPYRIGHT SERIES
The Educator's Guide to Copyright and Fair Use
Part 1: Copyrights and Copying Wrongs
Part 2: Is Fair Use a License to Steal?
Part 3: Copyright Law and New Technologies
Part 4: Applying Fair Use to New Technologies
Part 5: District Liability and Teaching Responsibility



Click here to return to the main page of the Education World series on copyright and fair use.
Editor's Note: The information contained in this article is, to the best of our knowledge, correct and up-to-date. Copyright laws and the circumstances surrounding the use of copyrighted materials can be difficult to interpret, however, and information in this article should not be construed as legal advice.
Linda Starr
Education World®
Copyright © 2000 Education World
10/17/2000

Guideline to Network Assessment & Security Audit

Guideline to Network Assessment & Security Audit

“The plan you are about to read is the process we use in the Mansfield ISD. This yearly audit points out our weakness and allow us to budget and plan new security measures to prevent intruders on our network. It works and it allows the district to employee low cost measures to provide the necessary security.”

Ray Jaksa, Chief Technology Officer, Mansfield ISD
rjaksa@mansfieldisd.org

The requirements for network assessment services are to provide a “real life” test of security controls as seen from external sources or the Internet. Network assessment services must include executing security penetration activities and security diagnostic techniques. The testing must involve using software and methodologies hackers utilize in attacking businesses on the Internet to gain access and cause harm or damage. The network assessment testing must include the following:

· Controlled external penetration testing directed at the perimeter security (e.g. external firewall, screening routers, web servers).
· Controlled internal penetration testing directed at the network, internal firewall, databases and web servers.
· Security diagnostic reviews of key network perimeter devices (e.g. firewalls, web servers, application servers).
· Identify potential exposures while preventing destruction of data or operational disruption to network and processing facilities.
· Development of specific technical and architectural recommendations that can be implemented to minimize any identified exposures.

The Network Security Assessment must contain the following five (5) phases:

Phase I – Internal DISTRICT Project Definition & Planning

The audit management team should identify management expectations, define the information required for analysis, establish interview schedules, and set project milestones. This phase of the project sets the agenda for the overall flow of information between the audit team and the client. This phase consists of two (2) primary steps:

· Step 1 – Conduct Kick-off Meeting: The initial efforts of the project include a kickoff meeting with management and appropriate networking and information systems personnel. This kickoff meeting and associated activities are used to confirm the overall approach to the project, obtain a better understanding of the environment and management’s related strategic objectives, and finally, to develop a detailed project work plan.

· Step 2 – Refine Project Work Plan: Update of the project work plan to define the specific tasks, schedules, major milestones, and team member responsibilities. The updated project work plan is coordinated with the client prior to any staff interviews and testing.

Phase II – Internal DISTRICT Security Environment Profile

The security environment profile establishes the security posture that management believes is in-place within the environment that includes the firewalls rule policies, operating system (OS) controls and security configurations and controls across the environment. It includes the following activities:

Identification of the environment –
· Identify the security controls.
· Identify the IT architecture and associated controls.
· Identify the network assets and threats.
· Identify data and controls.
· Identify OS configurations and access.

Identify Perimeter Architecture–
· Network segmentation and configuration.
· Perimeter access points (Internet, remote dial-in, leased circuits, third-party connectivity).
· Network device access controls.
· DMZ / Internal network connections.
· Physical access to the network.

Phase III – Third-party Attack and Penetration Testing

The Attack and Penetration Service should attempt to penetrate existing security in a manner that provides a "real life" test of data security, coupled with advanced security diagnostic techniques of critical components of the network. The service should perform controlled penetration testing of Internet connectivity and supporting infrastructure to assess the overall adequacy through the following process:

· Step 1 – Network Discovery: This task consists of gathering publicly accessible Infrastructure information about the client in order to characterize and map the external boundaries of the network. The service should attempt to identify possible points of entry into the client network. In order to avoid interruptions, many of the perimeter active testing tasks can be run during non business hours.

· Step 2 – Vulnerability Assessment: The purpose of this assessment is to identify network services, operating systems, applications and functionality on the systems or components in the environment, and to identify potential vulnerabilities within the environment. As information is gathered about the targets, cross-referencing with databases of known vulnerabilities and current and past attack methods are performed.

· Step 3 – Exploitation Testing: Penetration tests depend on the “targeted” IT infrastructure. For example, network objects within an IT infrastructure could include the following: routers, hubs, switches, terminal servers, bastion hosts, firewalls, file servers, network management servers, name servers and mail servers. The penetration tests should include exploiting the major vulnerabilities identified in Step 2 in an attempt to gain successfully greater levels of access to data or network resources, and to gather information about the internal network architecture and various trust relationships for further exploitation.

Phase IV – Third-party Security Diagnostic Review

While external penetration testing can provide a snapshot of an organization’s security posture, not all vulnerabilities or weaknesses may be uncovered. In addition, hosts or other critical servers that support the network perimeter may contain administrative, procedural or technical weaknesses that were not uncovered during the penetration test which could compromise the network or serve as launching points for network based attacks. For that reason, and in order to ensure the most comprehensive analysis possible, detailed security diagnostic reviews of key components of the network electronic perimeter as well as a review of the effectiveness of the perimeter architecture should be performed.

The result of this phase is a clear snapshot of the effectiveness with which the organization is implementing technical, administrative and procedural controls across the networks. In addition, it will clearly identify those areas where existing polices and procedures are either ineffective or inconsistently adhered to.
The following steps should be performed during this phase:

· Step 1 – Network Perimeter Architecture Review: An evaluation of the DMZ network infrastructure implementation (topology, protocols, and network monitoring controls). The systems and network environment are defined and mapped. This is then compared to the documented network architecture for the purpose of identifying unknown elements and potential vulnerabilities.

· Step 2 – External Network Discovery Results Comparison: The external networking mapping results from Phase I should be compared with the DMZ architecture that is determined in the previous step (Step 1).

· Step 3 – Firewall Configuration Review: The service should perform a complete diagnostic review of the firewall configuration that includes:
Ø Research known vulnerabilities for the firewall in use
Ø Review installation of hardware
Ø Review firewall rules (e.g. allowed and denied IP address and services, denied and logged IP address and services, custom services configuration)
Ø Review logging services

· Step 4 – Internet Router and Bastion Host Review: The service should perform a security diagnostic review of any filter routers and/or bastion hosts to assess their adequacy. This review includes a review of:
Ø Access Control Lists (ACLs)
Ø Controls over super user passwords (e.g., ENABLE passwords on Cisco routers)
Ø Use of strong encryption over super-user passwords (e.g., ENABLE SECRET on Cisco routers)
Ø Controls over remote maintenance dial in ports (if appropriate)
Ø O/S, firmware and patch level updates which may mitigate known vulnerabilities

· Step 5 – Internet Firewall and DMZ Server Operating System Review: The service should perform an operating system review of each component of the selected firewall and server systems, using platform specific security diagnostic software tools to determine if these components could be better secured. The Service should evaluate the security of:
Ø File permissions
Ø Password composition
Ø Key configuration files
Ø Startup files
Ø Trust relationships

· Step 6 – Internet Security Management and Administrative Procedures Review: A key component of a secure firewall is the existing of and adherence to management and administrative procedures. The service should perform a general controls review to determine that the following controls and related documentation are in-place:
Ø Firewall design and implementation guidelines
Ø Firewall system administration procedures
Ø System monitoring and auditing capabilities
Ø Adequacy/appropriateness of administration tools

Phase V – Third-party Reporting

The assessment should document the findings and recommendations from the first four phases and produce the following deliverables:

· Deliverable 1 - Oral Presentation: Delivery of an oral presentation detailing findings, analysis, conclusions and recommendations associated with the project.

· Deliverable 2 - Executive Summary: This is a two to three page summary that highlights the key risks and recommendations for mitigating those risks. This executive summary letter is oriented towards senior management.

· Deliverable 3 - Final Report: The controlled electronic perimeter assessment culminates in a final presentation style report to management that presents an assessment of the various security and control areas and provides recommendations for improvement. The report could include:


Ø Tools and techniques employed
Ø “Best Practices from other districts” analysis
Ø Highlights of major strengths and weaknesses
Ø Detailed explanations of the security impact to your company and the associated risks for each of the identified exposures
Ø Specific prioritized technical recommendations to be implemented to address the identified exposures, conclusions, and business-oriented recommendations