This document outlines the requirements for use of the computing systems, resources, and facilities located at and/or operated by the NASA Advanced Supercomputing (NAS) Division at NASA Ames Research Center (collectively, "NAS Systems Environment").

As a user of the NAS Systems Environment (NSE), I agree to the following and understand that failure to abide by these provisions may constitute grounds for termination of access privileges, administrative action, and/or civil or criminal prosecution:

1. I will abide by all requirements in the "NASA Cybersecurity and Privacy Rules of Behavior" document.
2. NSE accounts are to be used only for the purpose for which they are authorized and are not to be used for non-NASA related activities.
3. If issued any Government Furnished Equipment (GFE), I will use only GFE to connect to NSE systems.
4. If issued any GFE, I will connect to the NASA VPN prior to and while utilizing NSE resources when my GFE is not directly connected to a NASA network.
5. I am responsible for using the computing systems, resources, and facilities in an efficient and effective manner. I understand that account deactivation will result after 60 days of inactivity and data may be archived after 90 days unless my project or I make arrangements with NAS User Services to preserve my data.
6. NSE resources support many users. I agree not to consume more resources than I have been authorized to use. If my activity is deemed to be excessive or has an adverse impact on other users, I understand that my processes may be terminated without warning.
7. I understand that these computing systems are unclassified systems. Processing and storing of Classified National Security Information is prohibited.
8. I understand that these computing systems are categorized as moderate risk according to FIPS 199; therefore, processing and storing information that is categorized as high risk is prohibited. Furthermore, these computing systems are NOT authorized to process or store Sensitive Personally Identifiable Information (PII). I will not introduce Sensitive PII into any NSE systems.
9. I understand that I am responsible for protecting any information processed or stored in my accounts and will take appropriate precautions to protect CONTROLLED UNCLASSIFIED INFORMATION (CUI) or other sensitive information, regardless of whether explicitly marked as sensitive, which may include encrypting the data to provide protection that goes beyond the standard operating system (OS) protections provided by the computing systems.
10. I understand that I shall not share my NSE user account credentials or authenticator tokens or facilitate unauthorized access to any NSE system. This includes logging in to an NSE system and letting an unauthorized user access or use my session.
11. I understand that I shall not engage in activities that compromise or weaken the security of NSE systems or have been identified as prohibited and high-risk practices by the NAS Security Team. These activities include, but are not limited to, keeping unauthorized world-writable directories, running password cracking programs, downloading, or introducing malicious software, running unauthorized software, opening unauthorized listeners/port numbers, conducting unauthorized data transfers, and copying or making available system and password configuration files to others. 
12. I understand that I shall not make copies of copyrighted software except as permitted by law or by the owner of the copyright. I understand that I shall not use licensed software in a manner that violates the licensing agreement.
13. I understand that I shall not attempt to access any data or programs contained on systems for which I do not have authorization or explicit consent from the owner of the data/program, the NAS Division Chief, or the NAS Computer Security Official, nor shall I attempt to bypass any security controls without authorization.
14. I understand that I am required to report immediately any security weaknesses in the systems or any IT security incidents, including misuse or violation of this agreement, to the NASA Security Operations Center at +1 877.NASA.SEC or soc@nasa.gov.
15. I understand that I am required to access NSE systems only from remote systems that are safe from malicious programs and activity.
16. I understand that I will be required to complete the NASA mandatory CYBERSECURITY AND PRIVACY AWARENESS TRAINING course available at: https://satern.nasa.gov/. (Note: Additional details are available from NAS User Services.)
17. I understand that I may not disseminate information on behalf of the NAS Division on social media without export review and explicit authorization from an authorized NASA official. This limitation applies only to information owned by the NAS Division.
18. I understand that this/these system(s) and resources are subject to monitoring and recording and I will have no expectation of privacy in my use of and content on these systems and the computer equipment.
19. I understand that failure to comply with NAS Rules of Behavior may lead to loss of access, administrative action, and/or criminal prosecution.

The NAS Systems Rules of Behavior were last updated on December 11, 2023.