Cybersecurity & Acceptable Use: What Every RCC Employee Should Know

Posted on Author RCC

Why it matters

RCC’s operations, classrooms and student services all depend on secure technology. A single compromised account or unsafe download can disrupt instruction, expose employee and student data and damage institutional trust. Here’s how employees can stay secure and follow RCC’s Acceptable Use Policy (AUP):

  1. Watch out for phishing and scams
    • Verify the sender: Make sure the email address matches an RCC domain or an expected partner.
    • Hover before you click: Links should point to known, official RCC sites or systems.
    • Pause before responding: If an email asks for login credentials, money or gift cards, it’s likely a scam.
    • Report it: Use the “Report Phishing” button or forward suspicious messages to the IT Help Desk.
      Tip: When in doubt, contact the sender through a verified phone number or internal Teams message.
  2. Protect your accounts
    • Use strong passphrases — at least 12 characters combining words, numbers and symbols.
    • Enable multi-factor authentication (MFA) on all RCC systems.
    • Never share your password or MFA approval, even with supervisors or IT staff.
    • Update your password if you suspect it’s been compromised. Remember: No one at RCC IT will ever ask for your password.
  3. Secure your devices and workspace
    • Lock your screen before stepping away.
    • Keep software and antivirus tools up to date.
    • Use college-managed storage and OneDrive for all work documents — avoid personal cloud or USB drives.
    • Don’t download unapproved software or browser extensions.
  4. Handle confidential and student data safely
    • Only access data necessary for your role.
    • Share securely: Use approved tools for transmitting or storing student or employee information.
    • Double-check recipients before sending emails with attachments.
    • Do not forward work emails containing sensitive data to personal accounts. If you’re unsure whether data is sensitive, treat it as confidential and contact IT for guidance.
  5. Use RCC networks responsibly
    • Connect via RCC WiFi or VPN for remote work or off-campus access.
    • Avoid public WiFi for College systems unless protected by VPN.
    • Do not use personal devices for college business unless approved and secured.

Acceptable Use Policy highlights

  • Do
    • Use RCC systems for legitimate college business, instruction and professional development.
    • Follow copyright and software licensing rules.
    • Report security issues or policy violations immediately.
  • Don’t:
    • Share credentials or log into systems using another person’s account.
    • Access, share or store unauthorized data.
    • Use college systems for harassment, illegal activity or commercial purposes.

Using RCC technology is both a privilege and a responsibility. Following the Acceptable Use Policy keeps our network and community safe.

If you suspect a security issue:

  1. Stop what you’re doing.
  2. Disconnect from the network if malware or ransomware is suspected.
  3. Report immediately to ITHELPME.
  4. Follow IT’s guidance for password resets or device checks.

About AI tools

  • Do not enter confidential or student data into AI tools such as ChatGPT or Copilot unless RCC has approved them for institutional use.
  • Submit requests for new AI-enabled tools through the IT Service Desk for review and approval.

Key contacts and resources:

  • Acceptable Use Policy (AUP): Available on the RCC intranet under “Technology Policies.”
  • IT Security Resources: See the IT portal for VPN setup, phishing guides and secure file-sharing options.
  • For additional help, contact IT. Think before you click. Lock your screen. Use MFA. Handle data with care. Stay within policy. When in doubt — contact IT.