White Hat Code of Conduct

White Hat Code of Conduct Agreement

I understand that, as a student in the cybersecurity program¹, I must abide by WMU's information technology and computing policies. For purposes of this Code, those policies include but are not limited to, the Computing Resources Acceptable Use Policy, which applies directly to my courses in this program. I know that I can find this and other Office of Information Technology policies at https://wmich.edu/it/rules. In addition to these policies, I agree to adhere to the terms, conditions and the spirit of this White Hat Code of Conduct.

I understand that, while at Western Michigan University (WMU), I will learn tools, techniques and approaches for evaluating data security, security procedures, networks and systems. These tools and approaches are critical for cybersecurity professionals to secure and protect assets. However, if used incorrectly, they can also result in security breaches, network degradation and other forms of damage. In performing work within the program or using knowledge that I learned in program classes, I will strive not to adversely impact organizational computing resources or overall security architecture of WMU or other entities.

I further agree to:

• Examine and use the tools and approaches I learn through the program's classes only as directed and confined to the course labs;
• Report any security vulnerabilities discovered to the course instructor immediately, and not disclose them to anyone other than the appropriate authorities;
• Maintain the confidentiality of any private information learned through course labs;
• Hold harmless and indemnify the course instructor, department, college and University if I incorrectly use, intentionally or unintentionally, any of the tools or information I learn in this program to cause damage to University or private systems; and
• Abide by all laws governing use of computer resources.

I agree to NOT:

• Attempt to gain unauthorized administrator access to any server, network hardware or other network device to increase privileges on any University workstation;
• Disclose any private information that I discover as a direct or indirect result of this course;
• Take actions that will modify or deny access to any data or service that I do not own;
• Attempt to perform any unauthorized actions or use utilities outside the confines and structure of the labs; and
• Utilize any security vulnerabilities other than those for which I am specifically authorized during my enrollment in this program and/or course.

I have been given the opportunity to ask questions about this Code of Conduct and I understand and accept its terms. I understand that I may suffer academic and/or disciplinary consequences for failing to follow this Code or any of WMU's information technology or computing policies.

Websites referenced:

• https://www.eccouncil.org/code-of-ethics
• https://www.wmich.edu/it/rules

¹ This includes students in the following cybersecurity programs:

• Bachelor of Science (major or minor)
• Master of Science
• Graduate certificate
• As well as any other students taking a course offered primarily as part of this program