Suche senden
Hochladen
NoticeBored BYOD policy
•
2 gefällt mir
•
8,127 views
Durch KI verbesserter Titel
Fernando Palma
Folgen
Autor: site http://www.noticebored.com/ Mais materiais: http://www.portalgsti.com.br/
Weniger lesen
Mehr lesen
Technologie
Melden
Teilen
Melden
Teilen
1 von 4
Jetzt herunterladen
Downloaden Sie, um offline zu lesen
Empfohlen
01 Hardware
01 Hardware
Mattia Bedani
مذكرة حاسب الى مراجعه متميزة الترم الاول الصف الاول الاعدادى
مذكرة حاسب الى مراجعه متميزة الترم الاول الصف الاول الاعدادى
محمد حربي
Hardware komputer-beserta-fungsinya
Hardware komputer-beserta-fungsinya
Doni Setiawan
Sujet 4 - CARTE GRAPHIQUE
Sujet 4 - CARTE GRAPHIQUE
RMwebsite
Ppt bab 4 informatika
Ppt bab 4 informatika
GanendraValent
Lvmを縮小してみた
Lvmを縮小してみた
koedoyoshida
Tutorial setting bios
Tutorial setting bios
ALI FIKRI
U2
U2
Khalid Al-Ghanim
Empfohlen
01 Hardware
01 Hardware
Mattia Bedani
مذكرة حاسب الى مراجعه متميزة الترم الاول الصف الاول الاعدادى
مذكرة حاسب الى مراجعه متميزة الترم الاول الصف الاول الاعدادى
محمد حربي
Hardware komputer-beserta-fungsinya
Hardware komputer-beserta-fungsinya
Doni Setiawan
Sujet 4 - CARTE GRAPHIQUE
Sujet 4 - CARTE GRAPHIQUE
RMwebsite
Ppt bab 4 informatika
Ppt bab 4 informatika
GanendraValent
Lvmを縮小してみた
Lvmを縮小してみた
koedoyoshida
Tutorial setting bios
Tutorial setting bios
ALI FIKRI
U2
U2
Khalid Al-Ghanim
Secure Cloud Storage
Secure Cloud Storage
ALIN BABU
Introduction to the design and specification of file structures
Introduction to the design and specification of file structures
Devyani Vaidya
Makalah editing video
Makalah editing video
Purnawan Kristanto
Windows 7 Installation
Windows 7 Installation
khiana16
Informatica corso base hw e sw
Informatica corso base hw e sw
Daniele Bottoni Comotti
RAID CONCEPT
RAID CONCEPT
Ramasubbu .P
Tipos de navegadores
Tipos de navegadores
Jonaparo
Digital Watermarking
Digital Watermarking
Mohamed Talaat
مراجعة ليلة الامتحان فى الكمبيوتر 1ع ت أول
مراجعة ليلة الامتحان فى الكمبيوتر 1ع ت أول
أمنية وجدى
13. i veleni quotidiani 4 alcool
13. i veleni quotidiani 4 alcool
Luciana Petillo
Chapitre1ordinateur et systeme d'exploitation
Chapitre1ordinateur et systeme d'exploitation
Saad Loula
Pengenalan komputer
Pengenalan komputer
Adi Herdiana
Donanim yazilim
Donanim yazilim
Ali Yılmaz
Bagian-Bagian Motherboard
Bagian-Bagian Motherboard
Eko Kdh Teoritis
Projet bt1 informatique
Projet bt1 informatique
Majida Antonios, M.Ed.
10 savjeta za optimizaciju windows 7 operativnog sistema
10 savjeta za optimizaciju windows 7 operativnog sistema
Migdad Rešidović
Questões de hardware
Questões de hardware
Daniele Costa
Cara melakukan instalasi sistem operasi Windows dan Linux .docx
Cara melakukan instalasi sistem operasi Windows dan Linux .docx
KartikaJaya3
Informatica base1
Informatica base1
Andreina Concas
Memory hierarchy
Memory hierarchy
Srirengasrirenga
Pesquisa sobre BYOD
Pesquisa sobre BYOD
Fernando Palma
Exemplo de política de segurança
Exemplo de política de segurança
Fernando Palma
Weitere ähnliche Inhalte
Was ist angesagt?
Secure Cloud Storage
Secure Cloud Storage
ALIN BABU
Introduction to the design and specification of file structures
Introduction to the design and specification of file structures
Devyani Vaidya
Makalah editing video
Makalah editing video
Purnawan Kristanto
Windows 7 Installation
Windows 7 Installation
khiana16
Informatica corso base hw e sw
Informatica corso base hw e sw
Daniele Bottoni Comotti
RAID CONCEPT
RAID CONCEPT
Ramasubbu .P
Tipos de navegadores
Tipos de navegadores
Jonaparo
Digital Watermarking
Digital Watermarking
Mohamed Talaat
مراجعة ليلة الامتحان فى الكمبيوتر 1ع ت أول
مراجعة ليلة الامتحان فى الكمبيوتر 1ع ت أول
أمنية وجدى
13. i veleni quotidiani 4 alcool
13. i veleni quotidiani 4 alcool
Luciana Petillo
Chapitre1ordinateur et systeme d'exploitation
Chapitre1ordinateur et systeme d'exploitation
Saad Loula
Pengenalan komputer
Pengenalan komputer
Adi Herdiana
Donanim yazilim
Donanim yazilim
Ali Yılmaz
Bagian-Bagian Motherboard
Bagian-Bagian Motherboard
Eko Kdh Teoritis
Projet bt1 informatique
Projet bt1 informatique
Majida Antonios, M.Ed.
10 savjeta za optimizaciju windows 7 operativnog sistema
10 savjeta za optimizaciju windows 7 operativnog sistema
Migdad Rešidović
Questões de hardware
Questões de hardware
Daniele Costa
Cara melakukan instalasi sistem operasi Windows dan Linux .docx
Cara melakukan instalasi sistem operasi Windows dan Linux .docx
KartikaJaya3
Informatica base1
Informatica base1
Andreina Concas
Memory hierarchy
Memory hierarchy
Srirengasrirenga
Was ist angesagt?
(20)
Secure Cloud Storage
Secure Cloud Storage
Introduction to the design and specification of file structures
Introduction to the design and specification of file structures
Makalah editing video
Makalah editing video
Windows 7 Installation
Windows 7 Installation
Informatica corso base hw e sw
Informatica corso base hw e sw
RAID CONCEPT
RAID CONCEPT
Tipos de navegadores
Tipos de navegadores
Digital Watermarking
Digital Watermarking
مراجعة ليلة الامتحان فى الكمبيوتر 1ع ت أول
مراجعة ليلة الامتحان فى الكمبيوتر 1ع ت أول
13. i veleni quotidiani 4 alcool
13. i veleni quotidiani 4 alcool
Chapitre1ordinateur et systeme d'exploitation
Chapitre1ordinateur et systeme d'exploitation
Pengenalan komputer
Pengenalan komputer
Donanim yazilim
Donanim yazilim
Bagian-Bagian Motherboard
Bagian-Bagian Motherboard
Projet bt1 informatique
Projet bt1 informatique
10 savjeta za optimizaciju windows 7 operativnog sistema
10 savjeta za optimizaciju windows 7 operativnog sistema
Questões de hardware
Questões de hardware
Cara melakukan instalasi sistem operasi Windows dan Linux .docx
Cara melakukan instalasi sistem operasi Windows dan Linux .docx
Informatica base1
Informatica base1
Memory hierarchy
Memory hierarchy
Andere mochten auch
Pesquisa sobre BYOD
Pesquisa sobre BYOD
Fernando Palma
Exemplo de política de segurança
Exemplo de política de segurança
Fernando Palma
Classificação da informação
Classificação da informação
Fernando Palma
BIA - Business Impact Analysis
BIA - Business Impact Analysis
Allan Piter Pressi
Resumo ISO 27002
Resumo ISO 27002
Fernando Palma
Aula 3 - Política de Segurança da Informação (PSI)
Aula 3 - Política de Segurança da Informação (PSI)
Carlos Henrique Martins da Silva
Andere mochten auch
(6)
Pesquisa sobre BYOD
Pesquisa sobre BYOD
Exemplo de política de segurança
Exemplo de política de segurança
Classificação da informação
Classificação da informação
BIA - Business Impact Analysis
BIA - Business Impact Analysis
Resumo ISO 27002
Resumo ISO 27002
Aula 3 - Política de Segurança da Informação (PSI)
Aula 3 - Política de Segurança da Informação (PSI)
Ähnlich wie NoticeBored BYOD policy
Bring your own device guidance
Bring your own device guidance
Gary Chambers
Mobile Device Policy Template
Mobile Device Policy Template
Demand Metric
10 Legal Challenges in Creating a BYOD Policy - Lou Milrad
10 Legal Challenges in Creating a BYOD Policy - Lou Milrad
Lou Milrad
08 pdf show-239
08 pdf show-239
#TheFraudTube
Leveraging byod
Leveraging byod
ManageEngine
PACE-IT, Security+ 4.2: Mobile Security Concepts and Technologies (part 2)
PACE-IT, Security+ 4.2: Mobile Security Concepts and Technologies (part 2)
Pace IT at Edmonds Community College
Ravi i ot-security
Ravi i ot-security
skumartarget
BYOD: Six Essentials for Success
BYOD: Six Essentials for Success
DMIMarketing
Ten Commandments of BYOD
Ten Commandments of BYOD
K Singh
Term assignment
Term assignment
Jenny Shimbashi
Data Privacy Introduction
Data Privacy Introduction
G Prachi
Guide Preview: Ensuring your enterprise image-viewer if fully secure
Guide Preview: Ensuring your enterprise image-viewer if fully secure
Calgary Scientific Inc.
Maa s360 10command_ebook-bangalore
Maa s360 10command_ebook-bangalore
IBM Software India
Maa s360 10command_ebook-bangalore[1]
Maa s360 10command_ebook-bangalore[1]
IBM Software India
Bridging the Data Security Gap
Bridging the Data Security Gap
xband
University Personal Devices (BYOD) Policy
University Personal Devices (BYOD) Policy
keyashaj
IRJET- Data Leak Prevention System: A Survey
IRJET- Data Leak Prevention System: A Survey
IRJET Journal
Information Rights Management (IRM)
Information Rights Management (IRM)
Network Intelligence India
Byod
Byod
Asifulla Azad
Data-Centric Security | Seclore
Data-Centric Security | Seclore
Seclore
Ähnlich wie NoticeBored BYOD policy
(20)
Bring your own device guidance
Bring your own device guidance
Mobile Device Policy Template
Mobile Device Policy Template
10 Legal Challenges in Creating a BYOD Policy - Lou Milrad
10 Legal Challenges in Creating a BYOD Policy - Lou Milrad
08 pdf show-239
08 pdf show-239
Leveraging byod
Leveraging byod
PACE-IT, Security+ 4.2: Mobile Security Concepts and Technologies (part 2)
PACE-IT, Security+ 4.2: Mobile Security Concepts and Technologies (part 2)
Ravi i ot-security
Ravi i ot-security
BYOD: Six Essentials for Success
BYOD: Six Essentials for Success
Ten Commandments of BYOD
Ten Commandments of BYOD
Term assignment
Term assignment
Data Privacy Introduction
Data Privacy Introduction
Guide Preview: Ensuring your enterprise image-viewer if fully secure
Guide Preview: Ensuring your enterprise image-viewer if fully secure
Maa s360 10command_ebook-bangalore
Maa s360 10command_ebook-bangalore
Maa s360 10command_ebook-bangalore[1]
Maa s360 10command_ebook-bangalore[1]
Bridging the Data Security Gap
Bridging the Data Security Gap
University Personal Devices (BYOD) Policy
University Personal Devices (BYOD) Policy
IRJET- Data Leak Prevention System: A Survey
IRJET- Data Leak Prevention System: A Survey
Information Rights Management (IRM)
Information Rights Management (IRM)
Byod
Byod
Data-Centric Security | Seclore
Data-Centric Security | Seclore
Mehr von Fernando Palma
CRM Gerenciamento Do Relacionamento Com Clientes | Prof. Francisco Alves | C...
CRM Gerenciamento Do Relacionamento Com Clientes | Prof. Francisco Alves | C...
Fernando Palma
Formação em ciência de dados
Formação em ciência de dados
Fernando Palma
Apostila de Introdução ao Arduino
Apostila de Introdução ao Arduino
Fernando Palma
Apostila Arduino Basico
Apostila Arduino Basico
Fernando Palma
Cartilha Segurança na Internet - CERT.br
Cartilha Segurança na Internet - CERT.br
Fernando Palma
Ebook Apache Server: Guia Introdutório
Ebook Apache Server: Guia Introdutório
Fernando Palma
Apostila Zend Framework
Apostila Zend Framework
Fernando Palma
Hacker Ético
Hacker Ético
Fernando Palma
Ebook Governança de TI na Prática
Ebook Governança de TI na Prática
Fernando Palma
Simulado ITIL Foundation - Questões Comentadas
Simulado ITIL Foundation - Questões Comentadas
Fernando Palma
Introdução à Aprendizagem de Máquina
Introdução à Aprendizagem de Máquina
Fernando Palma
PDTI - Plano Diretor de Tecnologia da Informação (modelo)
PDTI - Plano Diretor de Tecnologia da Informação (modelo)
Fernando Palma
Guia Salarial 2017 Robert Half Brasil
Guia Salarial 2017 Robert Half Brasil
Fernando Palma
Tutorial memcached
Tutorial memcached
Fernando Palma
Gerenciamento na nuvem e System Center
Gerenciamento na nuvem e System Center
Fernando Palma
SAN: Storage Area Network
SAN: Storage Area Network
Fernando Palma
Linguagem ABAP
Linguagem ABAP
Fernando Palma
Ebook ITIL Na Prática
Ebook ITIL Na Prática
Fernando Palma
Exemplo de Plano Estratégico de TI - MEC
Exemplo de Plano Estratégico de TI - MEC
Fernando Palma
Apostila Tutorial CakePHP
Apostila Tutorial CakePHP
Fernando Palma
Mehr von Fernando Palma
(20)
CRM Gerenciamento Do Relacionamento Com Clientes | Prof. Francisco Alves | C...
CRM Gerenciamento Do Relacionamento Com Clientes | Prof. Francisco Alves | C...
Formação em ciência de dados
Formação em ciência de dados
Apostila de Introdução ao Arduino
Apostila de Introdução ao Arduino
Apostila Arduino Basico
Apostila Arduino Basico
Cartilha Segurança na Internet - CERT.br
Cartilha Segurança na Internet - CERT.br
Ebook Apache Server: Guia Introdutório
Ebook Apache Server: Guia Introdutório
Apostila Zend Framework
Apostila Zend Framework
Hacker Ético
Hacker Ético
Ebook Governança de TI na Prática
Ebook Governança de TI na Prática
Simulado ITIL Foundation - Questões Comentadas
Simulado ITIL Foundation - Questões Comentadas
Introdução à Aprendizagem de Máquina
Introdução à Aprendizagem de Máquina
PDTI - Plano Diretor de Tecnologia da Informação (modelo)
PDTI - Plano Diretor de Tecnologia da Informação (modelo)
Guia Salarial 2017 Robert Half Brasil
Guia Salarial 2017 Robert Half Brasil
Tutorial memcached
Tutorial memcached
Gerenciamento na nuvem e System Center
Gerenciamento na nuvem e System Center
SAN: Storage Area Network
SAN: Storage Area Network
Linguagem ABAP
Linguagem ABAP
Ebook ITIL Na Prática
Ebook ITIL Na Prática
Exemplo de Plano Estratégico de TI - MEC
Exemplo de Plano Estratégico de TI - MEC
Apostila Tutorial CakePHP
Apostila Tutorial CakePHP
Kürzlich hochgeladen
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
LoriGlavin3
Data governance with Unity Catalog Presentation
Data governance with Unity Catalog Presentation
Knoldus Inc.
Decarbonising Buildings: Making a net-zero built environment a reality
Decarbonising Buildings: Making a net-zero built environment a reality
IES VE
Sample pptx for embedding into website for demo
Sample pptx for embedding into website for demo
HarshalMandlekar2
UiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to Hero
UiPathCommunity
Modern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
Modern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
panagenda
Emixa Mendix Meetup 11 April 2024 about Mendix Native development
Emixa Mendix Meetup 11 April 2024 about Mendix Native development
Pim van der Noll
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptx
LoriGlavin3
[Webinar] SpiraTest - Setting New Standards in Quality Assurance
[Webinar] SpiraTest - Setting New Standards in Quality Assurance
Inflectra
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
panagenda
How to write a Business Continuity Plan
How to write a Business Continuity Plan
Databarracks
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc
Arizona Broadband Policy Past, Present, and Future Presentation 3/25/24
Arizona Broadband Policy Past, Present, and Future Presentation 3/25/24
Mark Goldstein
Potential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and Insights
Ravi Sanghani
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
Alkin Tezuysal
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
ThousandEyes
The Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and Cons
Pixlogix Infotech
Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...
Farhan Tariq
Generative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdf
Ingrid Airi González
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
AliaaTarek5
Kürzlich hochgeladen
(20)
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
Data governance with Unity Catalog Presentation
Data governance with Unity Catalog Presentation
Decarbonising Buildings: Making a net-zero built environment a reality
Decarbonising Buildings: Making a net-zero built environment a reality
Sample pptx for embedding into website for demo
Sample pptx for embedding into website for demo
UiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to Hero
Modern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
Modern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
Emixa Mendix Meetup 11 April 2024 about Mendix Native development
Emixa Mendix Meetup 11 April 2024 about Mendix Native development
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptx
[Webinar] SpiraTest - Setting New Standards in Quality Assurance
[Webinar] SpiraTest - Setting New Standards in Quality Assurance
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
How to write a Business Continuity Plan
How to write a Business Continuity Plan
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
Arizona Broadband Policy Past, Present, and Future Presentation 3/25/24
Arizona Broadband Policy Past, Present, and Future Presentation 3/25/24
Potential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and Insights
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
The Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and Cons
Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...
Generative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdf
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
NoticeBored BYOD policy
1.
NoticeBored information security
awareness BYOD policy Copyright © 2012 IsecT Ltd. Page 1 of 4 Information security policy BYOD (Bring Your Own Device) Policy summary Employees who prefer to use their personally-owned IT equipment for work purposes must be explicitly authorized to do so, must secure corporate data to the same extent as on corporate IT equipment, and must not introduce unacceptable risks (such as malware) onto the corporate networks by failing to secure their own equipment. Applicability This policy forms part of the corporate governance framework. It is particularly relevant to employees who wish to use PODs (see below) for work purposes. This policy also applies to third parties acting in a similar capacity to our employees whether they are explicitly bound (e.g. by contractual terms and conditions) or implicitly bound (e.g. by generally held standards of ethics and acceptable behavior) to comply with our information security policies. Policy detail Background In contrast to Information and Communications Technology (ICT) devices owned by the organization, Personally Owned Devices (PODs) are ICT devices1 owned by employees or by third parties (such as suppliers, consultancies and maintenance contractors). Authorized employees and third parties may wish to use their PODs for work purposes, for example making and receiving work phone calls and text messages on their own personal cellphones, using their own tablet computers to access, read and respond to work emails, or working in a home-office. Bring Your Own Device (BYOD) is associated with a number of information security risks such as: Loss, disclosure or corruption of corporate data on PODs; Incidents involving threats to, or compromise of, the corporate ICT infrastructure and other information assets (e.g. malware infection or hacking); Noncompliance with applicable laws, regulations and obligations (e.g. privacy or piracy); Intellectual property rights for corporate information created, stored, processed or communicated on PODs in the course of work for the organization. Due to management’s concerns about information security risks associated with BYOD, individuals who wish to opt-in to BYOD must be authorized by management and must explicitly accept the requirements laid out in this policy beforehand. Management reserves the right not to authorize individuals, or to withdraw the authorization, if they deem BYOD not to be appropriate and in the best interests of the organization. The organization will continue to provide 1 PODs are typically laptops, tablet computers, ultra-mobile PCs (UMPCs), desktop PCs, Personal Digital Assistants (PDAs), palmtops, cellphones, smartphones, digital cameras, digital memo recorders, printers etc., plus the associated portable storage media such as USB memory sticks, memory cards, portable hard drives, floppy disks etc.
2.
NoticeBored information security
awareness BYOD policy Copyright © 2012 IsecT Ltd. Page 2 of 4 its choice of fully owned and managed ICT devices as necessary for work purposes, so there is no compulsion for anyone to opt-in to BYOD if they choose not to participate in the scheme. Policy axioms (guiding principles) A. The organization and the owners and users of PODs share responsibilities for information security. B. Nothing in this policy affects the organization’s ownership of corporate information, including all work-related intellectual property created in the course of work on PODs. Detailed policy requirements 1. Corporate data can only be created, processed, stored and communicated on personal devices running the organization’s chosen Mobile Device Management (MDM) client software. Devices not running MDM (including devices that cannot run MDM, those on which the owners decline to allow IT to install MDM with the rights and privileges it needs to operate correctly, and those on which MDM is disabled or deleted after installation) may connect to designated guest networks providing Internet connections, but will not be granted access to the corporate LAN. They must not be used to create, modify, store or communicate corporate data. 2. PODs must use appropriate forms of device authentication approved by Information Security, such as digital certificates created for each specific device. Digital certificates must not be copied to or transferred between PODs. 3. BYOD users must use appropriate forms of user authentication approved by Information Security, such as userIDs, passwords and authentication devices. 4. The following classes or types of corporate data are not suitable for BYOD and are not permitted on PODs: Anything classified SECRET or above; Other currently unclassified but highly valuable or sensitive corporate information which is likely to be classified as SECRET or above; Large quantities of corporate data (i.e. greater than 1 Gb in aggregate on any one POD or storage device). 5. The organization has the right to control its information. This includes the right to backup, retrieve, modify, determine access and/or delete corporate data without reference to the owner or user of the POD. 6. The organization has the right to seize and forensically examine any POD believed to contain, or to have contained, corporate data where necessary for investigatory or control purposes. 7. Suitable antivirus software must be properly installed and running on all PODs. 8. POD users must ensure that valuable corporate data created or modified on PODs are backed up regularly, preferably by connecting to the corporate network and synchronizing the data between POD and a network drive, otherwise on removable media stored securely. 9. Any POD used to access, store or process sensitive information must encrypt data transferred over the network (e.g. using SSL or a VPN) and while stored on the POD or on separate storage media (e.g. using TrueCrypt), whatever storage technology is used (e.g. hard disk, solid-state disk, CD/DVD, USB/flash memory stick, floppy disk etc.). 10. Since IT Help/Service Desk does not have the resources or expertise to support all possible devices and software, PODs used for BYOD will receive limited support on a ‘best endeavors’ basis for business purposes only. 11. While employees have a reasonable expectation of privacy over their personal information on their own equipment, the organization’s right to control its data and manage PODs may
3.
NoticeBored information security
awareness BYOD policy Copyright © 2012 IsecT Ltd. Page 3 of 4 occasionally result in support personnel unintentionally gaining access to their personal information. To reduce the possibility of such disclosure, POD users are advised to keep their personal data separate from business data on the POD in separate directories, clearly named (e.g. “Private” and “BYOD”). 12. Take care not to infringe other people’s privacy rights, for example do not use PODs to make audio-visual recordings at work. Responsibilities Information Security Management is responsible for maintaining this policy and advising generally on information security controls. It is responsible for issuing digital certificates to authenticate authorized PODs, and for monitoring network security for unauthorized access, inappropriate network traffic etc. Working in conjunction with other corporate functions, it is also responsible for running educational activities to raise awareness and understanding of the obligations identified in this policy. IT Department is responsible for managing the security of corporate data and configuring security on authorized PODs using MDM. IT is also explicitly responsible for ensuring the security of the MDM software and related procedures in order to minimize the risk of hackers exploiting MDM to access mobile devices. IT Help/Service Desk is responsible for providing limited support for BYOD on PODs on a ‘best endeavors’ basis for work-related issues only. Information security incidents affecting PODs used for BYOD should be reported promptly to IT Help/Service Desk in the normal way. All relevant employees are responsible for complying with this and other corporate policies at all times. Internal Audit is authorized to assess compliance with this and other corporate policies at any time. Related policies, standards, procedures and guidelines Item Relevance Information security policy manual Defines the overarching set of information security controls reflecting ISO/IEC 27002, the international standard code of practice for information security management Mobile/portable computing policy Specifies a number of information security controls applicable to the use of mobile and portable devices. Although it was MDM standards and procedures Given stringent information security requirements and the diverse nature of mobile/portable devices, the choice, installation, configuration and use of Mobile Data Management software is non-trivial. IT’s responsibilities are fulfilled through MDM technical standards and operating procedures. Information Asset Ownership policy Information Asset Owners are responsible for classifying their assets and may determine whether BYOD is or is not appropriate for them. Human Resources policies, procedures, code of conduct etc. Explain standards of behavior expected of employees, and disciplinary processes if the rules are broken.
4.
NoticeBored information security
awareness BYOD policy Copyright © 2012 IsecT Ltd. Page 4 of 4 Item Relevance BYOD guidelines and briefings Further security awareness materials are available on this topic. Contacts For further information about this policy or general advice on information security, contact the IT Help/Service Desk. Security standards, procedures, guidelines and other materials supporting and expanding upon this and other information security policies are available on the intranet Security Zone. The Information Security Manager can advise on more specific issues. Important note from IsecT Ltd. This policy is unlikely to be entirely sufficient or suitable for you without customization. This is a generic model or template policy incorporating a selection of common controls in this area derived from our knowledge of good security practices and international standards. It does not necessarily reflect your organization’s specific requirements. We are not familiar with your particular circumstances and cannot offer tailored guidance. It is not legal advice. It is meant to be considered by management as part of the security awareness program, ideally as part of the regular review and update of your information security policies. For the Word version of this and over 40 other security policies, see www.NoticeBored.com.
Jetzt herunterladen