The ISSP should address the fair and responsible use of company computers & netw

Question

The ISSP should address the fair and responsible use of company computers & networks, including Internet access from the office. Policy should include a prohibition on connecting non-organizational equipment (phones, tablets, laptops, USB drives, etc.) to company computers & networks.

You will choose a reasonable position as to the level of restriction you decided to place on employee use of these technologies. Make sure your approach is consistent across the policy. In other words, don't be extremely permissive in one area of the policy, then extremely restrictive in another.

Can i get an example of how to start this?

Explanation / Answer

Answer)

ISSP should address the fair and responsible use of company computers & networks. Thus employees who are working in the computer systems and using the computer network has to adhere to a information security policy which includes the prohibition on connecting non-organizational equipment (phones, tablets, laptops, USB drives, etc.) to the computer of the organization and the unauthorized and prohibit use of the network for such activities. This kind of policy should start with that -

a) Personal devices such as the laptops, USB drives, external hard disks, should not be carried in the company's working space and should be deposited with security.

b) Any violation of the above and trying to connect personal devices with company computers & networks will lead to penal action, an investigation will be conducted for the responsible person(s). Any fraudulent activities and ignorance on the prohibition will lead to termination of employment and investigation.

c) Phone usage should be limited to the office workplace and in front of the computer. Bo snapshots of the computer screens to be taken to copy stuff from computers to mobile phones.

d) Smartphones should not be connected to the computer. Prohibition of this will lead to the same penal action and investigation.

e) Using the company network to do private tasks and personal download/upload is prohibited. The systems and network will be monitored for all of these and prohibition of this will lead to investigation and employee has to justify the usage, otherwise required strict action will be taken.

f) No source codes.projects/company confidential information to be transferred to personal email ids, posted on social network or uploaded anywhere. Strict action will be taken against prohibition.

Related Questions

Navigate

• Browse (All)
• Browse T
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.