Security Policies Incident Response Plans

Fraud and Misconduct Reporting Policy

Purpose

The purpose of this policy is to establish a framework for reporting fraud and misconduct at UTAS-Sur while ensuring confidentiality and protection for those who report such incidents. 

Scope of the Policy

This policy applies to all members of UTAS-Sur, whether on a temporary or permanent basis as well as any third parties working with or contracted by the university, it covers all environments where the university’s information systems are operated.  

Executive Responsibility

Information Systems and Educational Technologies Center.

Policy Custodian

‏Assistant Vice Chancellor for UTAS – Sur.

Enforcement

Any violation of this policy by all members or third parties (suppliers, contractors, business partners, etc.) will be subject to disciplinary and legal actions in accordance with the laws of the Sultanate of Oman, including regulations related to cybersecurity, university’s policies, labor laws, and electronic transactions. 

Policies and Controls

 Reporting Fraud and Misconduct: 

  • All university members are responsible for reporting any suspected cases of fraud, misconduct, or policy violations. 
  • Reports must be made through official channels designated by UTAS-Sur 
  • The identity of whistleblowers will remain confidential to protect them from retaliation. 
  • The university must investigate all reported cases and take appropriate action in accordance with regulations. 

 Investigation and Follow-up: 

  • The university will appoint a specialized committee to investigate reported cases. 
  • Investigations must be conducted transparently and impartially. 
  • The findings of the investigations must be documented and communicated to relevant authorities. 
  • If violations are confirmed, disciplinary actions or legal proceedings will be

Effective Date of the Policy

This policy shall take effect from the approval date.