ÌÇÐÄvlog¾«Æ·

The purpose of this policy is to outline technology governance at the ÌÇÐÄvlog¾«Æ· Institute of Technology and Advanced Learning (Conestoga). Technology is intended to support Conestoga's Strategic Plan, mission, teaching and learning, and enhance its administrative, academic, and research functions. This policy is intended to inform technology users of the standard defined by Information Technology and Systems (IT and S) for use of technology at Conestoga, including resources, services, and infrastructure throughout its lifecycle.

This policy applies to all technology users. This policy applies to all technology owned, leased or in the care, custody, or control of Conestoga at any of its campuses, offices, centers, sites, facilities, or locations where Conestoga business takes place. It also governs the selection, acquisition, usage, and decommission of all technology at Conestoga.

ÌÇÐÄvlog¾«Æ· maintains a glossary of terms specific to the institution. The ones in use for this document are defined below.

1. Technology Governance Mission Statement: Conestoga is committed to providing technology that is safe and secure for all technology users. The provided technology will be scalable, robust, and modern to promote educational outcomes and goals. Technology will be provided that is human centric, community focused, sustainability driven, and in alignment with Conestoga's Strategic Plan, vision, mission, and values.
1. Safe and Secure: Technology will be selected that is safe, securely designed, and kept up to date for technology users, and the organization. Harm caused by technology shall be analyzed, recorded, and appropriate harm reduction processes taken. Technology with undue harm levels will not be tolerated, and technology risks shall be assessed and managed to an acceptable risk tolerance level. The risks associated with technology at Conestoga will be mitigated by compliance with regulations, legislation, and guidance from relevant external bodies such as provincial and federal organizations.
2. Scalable, Robust, and Modern: Technology will grow and contract with its usage while providing a stable, reliable, and acceptable technology user experience under all conditions of usage. Technology will be designed and deployed with overlapping levels of redundancy and resiliency with backup, recovery, and replacement in mind. Technology will be kept within supported life cycles and reviewed for replacement or upgrade on a standard cadence.
3. Education-focused: Technology will be focused on the best education experience and outcomes for all technology users. Technology will support, enhance, improve, and drive Conestoga's mission and student success. Technology will be used to support learning goals in alignment with Conestoga's educational vision.
4. Community Focused and Human-Centric: Technology will be designed and deployed for use by all technology users, considering the use of assistive devices, differences in technology interfaces, and adhering to all required regulatory and legislative requirements for access. Technology will not be selected for the sake of technology, but for the sake of technology users of said technology. Technology will be a bridge for all technology users to reach common ground and understanding while enhancing the College and wider community
5. Sustainable: Throughout the technology lifecycle, sustainability, reuse, reallocation, and recycling will be followed and promoted. Technology will be used and retained for as long as reasonably possible while providing the required outcomes. All technology will be acquired and disposed of in a manner that aligns with and promotes sustainability.
2. Technology Register: Conestoga will maintain a register of technology. This register will contain a listing of all technology that Conestoga has owned, leased or in the care, custody, or control of Conestoga with current licensing and support. The register will contain information about the intended audience, the technology type and intended usage, supporting documentation or training, and when the current supported technology may be reviewed, renewed, or removed. IT and S will be the responsible party for maintaining, updating, and modifying the register.
3. Monitoring and Auditing: Conestoga will monitor the usage and status of technology as part of ongoing operations. This monitoring will be for tracking issues, supporting technology users, and ensuring proper usage of technology. Technology monitoring will also include security monitoring to ensure that technology remains safe and secure. Technology auditing will be done on a regular basis to ensure proper access control, acceptable technology usage, and that technology is functional and is in a supported state.
4. Expectation of Privacy: Conestoga may access and use all information and data stored on and communicated through its technology resources for lawful purposes, including to facilitate work in an employee's absence, to conduct routine technical administration, to routinely audit system use, to investigate suspicions of improper use, any other misconduct, and to comply with legislation and regulations. Technology users who engage in personal use on technology resources are deemed to accept that Conestoga has the right to access and may raise no expectation of privacy that prevents Conestoga from accessing and using information and data for its intended purposes.
5. Violations: All technology users share responsibility for complying with and reporting violations of this policy. Violation of this policy may result in the suspension of privileges and/or other disciplinary action as warranted. Conestoga reserves the right to restrict any services or programs that are deemed to violate this policy. Conestoga reserves the right to recover its technology if direct or indirect costs are incurred because of any violation of this policy.
6. Accountability 
   
1. Conestoga senior IT and S leadership, which is comprised of the Vice President, Directors, Associate Directors, and the Office of the Vice President, will be responsible for ensuring that all technology follows this policy.
2. IT and S department members are responsible for ensuring that they are knowledgeable of this policy and can apply it to their daily work.
3. Technology users are responsible for reading and understanding this policy.