Zimbabwe Open University – ICT Usage Policy

This ICT Usage Policy provides guidelines for responsible, secure, and efficient use of the University’s digital resources. It aligns with modern technology practices, cybersecurity standards, cloud computing, AI usage, and remote‑work requirements.

1. Purpose

To promote safe, ethical, and productive use of ICT services while protecting University data, infrastructure, and users.

2. Acceptable Use

• Use ICT resources primarily for academic, research, administrative, and institutional purposes.
• Personal use is permitted only when it does not interfere with University operations, security, or bandwidth.
• Users must not engage in activities that disrupt services, degrade performance, or violate laws and University policies.

3. Email, Internet & Cloud Services

• Use official ZOU email for University business.
• Do not share confidential information over unsecured channels.
• Cloud services must be used responsibly and only for permitted work data.
• MFA is mandatory where applicable.

4. Security & Data Protection

• Do not bypass security controls or access systems without authorization.
• All devices must run approved and updated antivirus software.
• Passwords must remain confidential and meet complexity standards.
• Store data on approved University systems with proper access controls.

5. Use of AI & Emerging Technologies

• AI tools may be used responsibly and ethically.
• Do not input confidential or sensitive data into external AI platforms.
• AI output must be validated for accuracy and compliance.

6. BYOD & Remote Working

• Personal devices must meet University security requirements.
• Only approved devices may access sensitive systems.
• Report lost/stolen devices containing University data immediately.

7. Network & Bandwidth Use

• High‑bandwidth activities are restricted unless academic‑related.
• Unauthorized hotspots and routers are prohibited.
• The University may monitor network traffic for security and performance.

8. Prohibited Activities

• Accessing or distributing offensive or illegal material.
• Hacking, bypassing security, or introducing malware.
• Impersonation or unauthorized system modification.

9. Compliance & Consequences

Violations may lead to suspension of ICT privileges, disciplinary action, or legal consequences. Users must report suspected breaches or misuse to the ICT Department immediately.

For full ICT policy details, refer to the official University ICT Policy document.