Access and Security Control Policy

• HPL will provision required permissions to its users to access HPL systems and resources. 

• HPL will ensure availability, integrity and confidentiality of the system and resources.  

• HPL will review the access list on pre-defined durations.  

• HPL will ensure network security, end point security, physical and data security and access by having necessary controls in place.  

• HPL will enforce the access and security control policy to all involved parties.  

Library Members 
Library members are provided with access privileges to library technology resources (including web, networks, applications, and devices) based on the following principles:  

• Open Access: granting open unrestricted access to IT resources for users to consume digital services and to support intellectual freedom and discovery.  

• Secure Availability: balancing open access with availability, and security of technology resources to ensure that digital services are protected against disruption, privacy breaches, and are accessible to all library users in a secure manner.  

Library members are governed by the Technology and Internet Use Policy and Customer Code of Conduct while accessing HPL technology resources and services. 

Library Board and Employees 
While carrying out library business, the Library Board, employees including volunteers, and external organizations are provided with access privileges to systems and technology (including web, networks, systems, applications and devices) based on the following principles:  

• Need to know: They will be granted access to systems that are necessary to fulfill their library roles and responsibilities. 

• Least privilege: They will be provided with the minimum privileges necessary to fulfill their roles and responsibilities.  

User Education and Transparency
Educating employees and library members on effective use of systems and ways to protect information and systems will be a priority.  

This policy applies to all Hamilton Public Library provided or supported systems, infrastructure, data and services, unless noted otherwise, including: 

• Locations: all HPL locations including central, branches and other mobile locations. 

• Technology: IT systems, or applications that store, process or transmit information. All network and computer hardware, virtualized environment, storage, software and applications, staff mobile devices, and telecommunication systems.  

• Processes: all processes that support, operations, environments and services. All automated and manual procedures for the controls. 

• Interfaces: all interfaces within the environments and to external entities. 

• Data: all data including transaction streams, files, data files, repositories, databases, tables, inputs and outputs used by a system. 

• Security Credentials: all user accounts, all tokens, all security credentials including all user IDs, functional IDs, machine IDs, admin, root, and super user type accounts.