Artificial Intelligence (AI) IT Security Guideline

Purpose: These guidelines were established for the responsible and secure use of Artificial Intelligence (AI) technologies at Pittsburg State University (PSU). The university encourages innovation and efficiency through AI while ensuring the security, privacy, and ethical considerations necessary for its responsible implementation.

Applies to: These guidelines apply to all faculty, staff, students, contractors, third-party vendors, and all affiliates who utilize AI technologies in academic, administrative, and research activities at PSU.

Statement:
Appropriate use should always be legal and ethical, reflect academic honesty and community standards, and show restraint in the consumption of shared resources. It should demonstrate respect for intellectual property; ownership of data; system security mechanisms; and individual’s rights to privacy, freedom of speech, and freedom from intimidation, and harassment.

Guideline:

Principles of Responsible AI Use

Ethical Use: AI tools should not be used to engage in deception, discrimination, or other unethical behaviors.

Data Privacy: Users must avoid inputting personally identifiable information (PII), confidential university data, or any other sensitive information into AI systems that do not meet PSU security standards.

Accountability: Users are responsible for verifying AI-generated outputs for accuracy, bias, and reliability before using them in decision-making processes. AI-assisted decision-making in administrative or academic processes should be monitored, with final accountability resting on human oversight.

Compliance: AI use must adhere to relevant university policies, legal requirements, and regulatory standards. This includes but is not limited to: FERPA, HIPAA, and intellectual property laws.

Security Considerations

AI Tools: Before using AI tools, users must review their terms of service, data retention policies, and security compliance.

AI Cyber Risks: Users should be aware that AI-generated content can be manipulated for phishing attacks, misinformation, and social engineering threats:

• Phishing Example: AI-generated emails that impersonate university officials or trusted entities to trick recipients into revealing credentials, downloading malicious attachments, or clicking harmful links.
• Social Engineering Example: AI-powered chatbots or deepfake voice technologies used to impersonate IT support or senior administrators, convincing users to share login details or perform unauthorized actions.
• Automated Misinformation: AI can be exploited to generate fake news or misleading content that spreads misinformation among students, faculty, or the public.

Reporting

Suspected security incidents involving AI should be reported immediately to Information Technology Services (ITS): itsecurity@pittstate.edu.