Internet Filtering

Number: ENT-SEC-121

Established for: State of Montana Information Technology Enterprise

Steve Bender, Acting Director
Department of Administration
Jeff Brandt, Acting Chief Information Officer
Information Technology Services Division
Department of Administration
October 2004

Policy - Requirements

SCOPE

This policy applies to all computers that reside on the inside of the State's Internet firewall, including all state agencies as well as local government entities. This policy does not apply to colleges and universities, the Commissioner of Higher Education Office, or public access computers in libraries.

PURPOSE

The Department of Administration Information Technology Services Division (ITSD) has the responsibility to insure that the state's telecommunications systems are used in the most effective and secure manner. To do so, ITSD believes that employees must understand the appropriate use of Internet resources. ITSD also finds that allowing access to certain types of web services or sites does not lead to effective and secure use of the systems. Therefore, ITSD adopts the following policy.

The purpose of this policy is to describe the steps to be taken to respond to requests for Internet filtering. This policy is to be used for all requests for Internet filtering, regardless of the agency or individual that is making the request.

DEFINITIONS

Agency - Any State or local agency, or other entity that uses the State's Internet services.

Internet Filtering - The blocking, or prevention of access to a web site by users of the State's Internet services.

REQUIREMENTS

Internet filtering (or blocking) of individual web sites or general classes of sites will be instituted for the following reasons:

  • ITSD Management Request. ITSD management can request a web site or class of sites be blocked based on an analysis of web site access for the following reasons: 1) network performance, 2) an apparent violation of existing state or federal law or policy, or 3) security risks. Sites filtered will be those sites determined to not be needed by the majority of State employees to perform their job duties.
  • Agency Request. An agency can request a site or class of sites be blocked for a single device, group of devices or all of the devices in an agency. Agencies must make requests for blocking in writing to the Director of the Department of Administration.

A current list of web sites filtered is contained in Appendix A - Web Site Filters. The sites or classes of sites filtered, is subject to change at any time. ITSD will notify users of the state's Internet services prior to the implementation of a filter, unless it is deemed to be an emergency.

Agencies that have particular devices that need access to blocked sites can request that access be provided specifically to them. Agency requests must be received from the agency head. The request should be directed to ITSD Policy and Planning Services Bureau Chief.

Background - History on the creation of or changes to this policy

This policy was created by the Policy & Planning Services Bureau of the Information Technology Services Division.

This policy was distributed to the Information Technology Manager's Council, Information Technology Advisory Council and the SummitNet Executive Council for comment prior to adoption. This policy was updated by ITSD in 2004 because of the dissolution of the Council.

Guidelines - Recommendations, not requirements

All entities that use the state's network that are not included within the scope of this policy are encouraged to adopt a similar policy.

References - Laws, rules, standard operating procedures and applicable policies

2-17-302, MCA; ARM 2.13.102; ARM 2.13.107; MOM 3-0130; MOM 3-0620; Internet Acceptable Use Policy, SummitNet Acceptable Use Policy, Transmission Privacy Policy, User Responsibilities Policy.

APPENDIX A

INTERNET FILTERING POLICY - WEB SITE FILTERS

Last Update: 01/10/03

This appendix identifies the individual and classes of web sites filtered by the State of Montana. The sites or classes of sites filtered is subject to change at any time with the approval of SEC (Summitnet Executive Council).

INDIVIDUAL SITES

  • www.webshots.com
  • www.kazaa.com

SITE CLASSES

  • Radio Stations - real audio
  • Sexually Explicit Material (pornography)
  • Hate Speech
  • Web proxy or anonymous sites
  • Non-standard e-mail sites
  • Music distribution sites
  • Instant Messenger & Chat sites
  • Gambling sites
  • Adware/Spyware
  • Games

Appendix A - Request for Agency Communications Records