Technology Prohibited by Regulation FAQs

SHSU is a state agency; therefore must comply with requirements set by the Office of the Governor, rules set by regulatory agencies, and legislative mandates passed into law. Further, the Texas State University System (TSUS) issues policies corresponding to similar compliance requirements.

Yes, faculty and staff may request exceptions. To request an exception, complete the Exception Request Form. The form must include a business justification and be approved by the President.

For this policy, mobile devices include but are not limited to laptops, smart phones, tablets, smart watches, and e-readers.

The longer definition of a mobile device is: a portable computing device that has a small form factor such that it can easily be carried by a single individual; is designed to operate without a physical connection (e.g., wirelessly transmit or receive information); and is powered on for extended periods of time with a self-contained power source. Mobile Devices may also include voice communication capabilities, on-board sensors that allow the device to capture (e.g., photograph, video, record, or determine location) information, and/or built-in features for synchronizing local data with remote locations.

The DIR maintains a list of prohibited technologies and covered applications, including software, applications, developers, hardware, equipment, and manufacturers, as well as technologies from any subsidiary or affiliate of an entity on DIR’s list (e.g., a software studio or child company partially owned by a listed entity).

Yes, within the scope of this prohibition, using your personal device as part of Duo Multi-Factor Authentication (MFA) is not considered conducting state business or university business.

No. SHSU's device management software is for university-owned devices.

The DIR maintains a list of prohibited technologies, including software, applications, developers, hardware, equipment, and manufacturers, as well as technologies from any subsidiary or affiliate of an entity on DIR’s list (e.g., a software studio or child company partially owned by a listed entity).

SHSU does not manage user’s personal devices. Users with personal devices with prohibited technologies installed will be prohibited from entering sensitive locations and blocked on the SHSU network if they connect to SHSU-owned networks.

This answer depends on the tools and technologies you use on a day-to-day basis. Employees who use only university-owned devices, software, and other technologies to do their job should experience little to no impact. Other employees may experience some changes, such as switching to different software or other technologies or working with their department to acquire university-owned devices to use for work.

You can request an exception by completing the Exception Request Form. This request must be approved by the university president.

Discontinue the use of the prohibited technology and request an exception by submitting an Exception Request Form. Be sure that you include your business justification for continuing use of the technology. This exception must be approved by the university president.

No. Having prohibited technology on your personal device while conducting state business is prohibited. You need to remove the prohibited technology before continuing to use this device for university business. If you are required to conduct university business on this device and cannot or will not remove the prohibited technology, you should consult with your supervisor about what device(s) may be made available for performing your duties.

These rules apply to all individuals accessing university-owned information resources.

You may have prohibited technologies on personally-owned devices. However, you cannot conduct university business from a personally-owned device that contains prohibited technologies.