Risk Acceptance Agreement

smileybloatNetworking and Communications

Nov 20, 2013 (3 years and 11 months ago)

67 views


E
-
mail c
ompleted agreements to
nsg
-
net@northwestern.edu

and
security@northwestern.edu
.

Risk Acceptance Agreement


TO:

Director of

Telecommunications and Network Services


Manager of

Telecommunications and Network Services


Director of
Information and Systems Security/Compliance





FROM:

<NUIT Network Firewall Service Customer>





RE
:

Risk Acceptance:
Customer management of policy ruleset on NUIT Network Firewall Service


for selected hosts on <Network> at <Location(s)>



DATE:

date of agreement




Risk Detail:
Network Firewall policy ruleset management can be a complex activity.

Rulesets should be
maintained by qualified personnel who possess an understanding of firewall platform features and network
security best practices. Improperly configured policy rulesets can result in the misuse and/or abuse of
University electronic equi
pment and network resources, and/or the unintentional release or compromise of
information that should remain restricted to groups within the University community or that is
legally/contractually restricted (ex: FERPA).


Risk Acceptance:
We the undersign
ed understand the risks of improperly configured policy rulesets on
Network Firewalls, including those risks listed above. By assuming responsibility for the management of the
policy rulesets for this NUIT Network Firewall Service for <Network> at <Locati
on(s)>, we acknowledge our
acceptance of the risks of compromise for the following protected electronic equipment and types of
information:

<List or Describe the equipment and information that will be protected>


Change Notification:
We agree to prom
ptly notify Telecommunications and Network Services and Information
and Systems Security/Compliance of any change that could materially affect this agreement (e.g., change in
location, administrator transfer/termination, etc.).


This risk

and agreement

to notify

are

accepted by:


Unit
Manager’s Signature:

_
________________________________


Unit
Manager’s Printed Name

&
Title



< Printed Name, Title >


Ruleset Administrator’s
Signature:


__________________________________


Ruleset Administrator’s Pr
inted
Name & Title



__________________________________


NUIT
Approval Signature:

_
_________________________________


NUIT Approver’s
Printed Name

&
Title


< Printed Name, Title >