[ILUG] Office IT policy document

[Paul Jakma]

On Thu, 21 Apr 2005, Gareth Eason wrote:

> 	Generally there are some catch-all protect-our-ass type clauses, 
> e.g.:
> 	- Office IT equipment will be used only for the purposes of company
> business.
> 	- No pornographic, racist, sexist, defamatory or otherwise
> inappropriate or illegal material may be stored or viewed using office
> IT equipment. (You'll need to define 'inappropriate' for your needs.)

Why does this kind of stuff need to be IT policy specific? Does it 
mean its ok to use company stationary for racist messages? Does it 
mean I can use the fax machine and other non-IT office equipment to 
run my extra-corporate home business?

Course not.

All this stuff is non-IT specific and should be covered by general HR 
policy. Punt to HR, whose job it is to formulate such general policy.

> 	- Do not share your logon credentials, passwords or PINs with any 
> other
> individual or oganisation, even the IT department. (This is something I
> think neds to be beaten into users with a stick! Or perhaps the IT
> department should be beaten until they realise they don't ever NEED to
> be told my password - they have root ;-)  )

The best way to do this is unify credentials as much as possible, and 
make the credentials the user needs to access things the company 
cares about (eg the accounts database, whatever) the same as things 
the user cares about (ie their email, their login to the HR database 
which shows their salary, etc) :).

> 	Usually, some ownership things are there, e.g.:
> 	- Corporate IT equipment remains the property of $our_corp at all
> times. In the event of termination of employment with $our_corp, all
> mobile phones, laptops, computer media, hard & soft copies of
> documentation and $other_things must be returned.

See above.

regards,
-- 
Paul Jakma	paul at clubi.ie	paul at jakma.org	Key ID: 64A2FF6A
Fortune:
O'Reilly's Law of the Kitchen:
 	Cleanliness is next to impossible