Standards

None

Guidelines

1. Follow existing security policies and procedures in the use of Internet services and content, and refrain from any practices that might jeopardize IHS computer systems and data files, including but not limited to virus attacks, when downloading files from the Internet.
    
2. Do not import via the Internet and distribute any data or graphics to IHS employees or customers that would create a hostile work environment (prohibited in accordance with the Equal Employment Opportunity Act). Where the situation warrants, coordinate security and privacy matters with the component's network administrator or server webmaster where content is stored.
    
3. Protect information entrusted to the agency. The continued protection of sensitive or confidential information, as well as the effective use of safeguards to assure the integrity of IHS information and systems will determine the extent to which the Internet and Intranet will be accessed and used to support IHS missions. On-line computer security training sessions can be found on the IHS Intranet at "http://home.ihs.gov/Internal/security/sectoc.asp".
    
4. Reference the HHS World Wide Web Applications and the Internet Best Practices and Guidelines, http://www.hhs.gov/progorg/oirm/bestguid.html, Information/System Protection and Security sections for additional information.