Except the network belongs to the institution (i.e. its users), not the IT department (although most do seem to think this way).