Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

Corporate IT Policy

Thread Tools
 
Search this Thread
 
Old 10 October 2008, 12:05 PM
  #1  
Sonic'
Scooby Regular
Thread Starter
 
Sonic''s Avatar
 
Join Date: Dec 2002
Location: Couch Spud
Posts: 9,277
Likes: 0
Received 0 Likes on 0 Posts
Default Corporate IT Policy

Does anyone have any IT Policies that they give to staff

I need to do some for our staff, including a seperate one for VPN access

Cheers

Steve
Old 10 October 2008, 12:14 PM
  #2  
alpha charlie
Scooby Regular
 
alpha charlie's Avatar
 
Join Date: Mar 2007
Location: Yellowbellyland
Posts: 515
Likes: 0
Received 0 Likes on 0 Posts
Default

The company I work for has a great policy on IT, if someone does something on company IT that the IT section dont like, the person gets a 6 month written warning or fired, then the rest of us hear about it and it goes in the policy.
Since the last event a few months back where the bloke was sacked noone in the office will do anything halfway iffy on the computers, no connecting USB devices or playing audio CD's anymore!
AC
Old 10 October 2008, 02:52 PM
  #3  
T4molie
Scooby Regular
 
T4molie's Avatar
 
Join Date: Dec 2002
Location: Dum dum de dum....
Posts: 2,617
Likes: 0
Received 0 Likes on 0 Posts
Default

Steve,

Are you looking for a general sort of one?

Andy
Old 10 October 2008, 02:53 PM
  #4  
T4molie
Scooby Regular
 
T4molie's Avatar
 
Join Date: Dec 2002
Location: Dum dum de dum....
Posts: 2,617
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by alpha charlie
The company I work for has a great policy on IT, if someone does something on company IT that the IT section dont like, the person gets a 6 month written warning or fired, then the rest of us hear about it and it goes in the policy.
Since the last event a few months back where the bloke was sacked noone in the office will do anything halfway iffy on the computers, no connecting USB devices or playing audio CD's anymore!
AC
And yet you're still posting on SN
Old 10 October 2008, 03:18 PM
  #5  
Dedrater
Scooby Regular
 
Dedrater's Avatar
 
Join Date: May 2008
Posts: 3,957
Likes: 0
Received 0 Likes on 0 Posts
Default

..

Sample IT Policy
Introduction

1. The purpose of the IT Policy is to ensure the effective protection and proper usage of the computer systems within <NAME OF ORGANISATION>. The IT investment of the organisation is considerable, and the dependency on computer technology in the delivery of <NAME OF ORGANISATION> services is high. The IT Policy will assist in maintaining systems at operational level. Contraventions of the IT Policy could seriously disrupt the operation of <NAME OF ORGANISATION> and any breaches will be treated seriously.
2. Managers are responsible for ensuring adherence to the IT Policy within their Departments, overseen by the relevant member of the Directorate.
Section One – Computer Systems
Network
1. Network management, administration and maintenance within <NAME OF ORGANISATION> are the responsibility of the ICT Department/ICT Services Provider). Access to and usage of the Servers is restricted to authorised staff.
Hardware (PCs, Laptops, Notebooks, Printers, Modems, etc.)
2. The requirement for IT equipment will normally be identified within the context of an IT strategy for <NAME OF ORGANISATION> and more specifically within a planned programme of PC replacement.
3. The purchase, installation, configuration and maintenance of computer equipment are the responsibility of the ICT Department/ICT Services Provider.
4. Computer equipment registers will be maintained by the ICT Department/ICT Services Provider to ensure full tracking of equipment.
5. The ICT Manager (or other named post) will liaise with Office Services Manager (or other named post) to ensure adequate insurance cover for computer equipment. The ICT Department (or named post) will ensure staff are aware of any restrictions and limitations.
6. Requirements for new hardware should be discussed in advance with the ICT Manager/ICT Services provider to assess the detailed specification.
7. The deployment of new equipment or re-deployment of existing equipment is undertaken by the ICT Department/ICT Services provider after consultation with Department Managers/Heads.
8. The relocation of hardware within or outwith <NAME OF ORGANISATION> premises should be discussed with the ICT Manager/ICT Services provider in advance to ensure good reason for relocation, determine the most appropriate means of relocation and to ensure computer equipment registers and insurance policies are updated.
9. The security and safekeeping of portable and other equipment used outwith <NAME OF ORGANISATION> offices is the responsibility of the member of staff using it.
10. All members of staff are responsible for the proper usage, care and cleanliness of the computer equipment they use. Managers should ensure that staff maintain the cleanliness of their machines.
11. Problems with hardware should be reported to the ICT Department/ICT Services provider in accordance with established IT Help Desk procedures.
Software & Software Applications
12. The requirement for IT equipment will normally be identified within the context of an IT strategy for <NAME OF ORGANISATION> and more specifically within a planned software upgrade programme.
13. The purchase, installation, configuration and support of all software and software applications used within <NAME OF ORGANISATION> are the responsibility of the ICT Department/ICT Services Provider.
14. Software, including screensavers, must not be installed by users without prior authorisation from the ICT Department/ICT Services Provider. This includes programs downloaded from the Internet.
15. <NAME OF ORGANISATION> will treat the installation of unlicensed software by users as a serious breach of the IT Policy.
16. Software licence registers will be maintained by the ICT Department/ICT Services Provider to ensure compliance with legislation.
17. Software disks will be kept securely by the ICT Department/ICT Services Provider.
18. Requirements for new software/software applications should be discussed in advance with the ICT Manager/ICT Services Provider to assess the detailed specification and implications.
19. Problems with software should be reported to the ICT Department/ICT Services Provider.
20. Requests for modifications, enhancements and upgrades of existing software applications should be discussed with the ICT Manager/ICT Services Provider.
Data/Electronic Information
21. Data Management should be in accordance with the data management policies and procedures of <NAME OF ORGANISATION>.
22. Department Managers/Heads are responsible for maintaining the quality of the computer-held data processed by their staff.
23. The individual user is responsible to their line manager for the quality of the computer data they have personally processed.
24. Department Managers/Heads are responsible for ensuring compliance with Data Protection legislation with regards to data processed within their Departments.
25. In conjunction with the nominated Data Protection Officer of the organisation, the ICT Manager/ICT Services Provider will keep abreast of data protection legislation, advise accordingly and ensure applications and databases are registered in accordance with the legislation and internal organisational data management policies.
26. All information/data held on the organisation’s systems is deemed the property of <NAME OF ORGANISATION>.
27. As a condition of employment, staff consent to the examination of the use and content of all data/information processed and/or stored by the staff member on the organisation’s systems as required.
Back Up
28. The ICT Department/ICT Services Provider is responsible for ensuring the implementation of an effective back-up strategy for server-held software and data.
29. Users of networked desktop PCs should avoid storing data on their local hard drives. Data so stored may be lost if a problem develops with the PC, and the ICT Department may not be able to assist in its recovery. Data should be stored within the file directory (folder) structure used by the office.
30. Remote and laptop/notebook PC users must ensure they back up their data regularly. The ICT Department/ICT Services Provider will provide advice and assistance.
Anti-Virus Protection
31. The ICT Department/ICT Services Provider is responsible for the implementation of an effective virus security strategy. All machines, networked and standalone, will have up-to-date anti-virus protection.
32. The installation of anti-virus software on all machines is the responsibility of the ICT Department/ICT Services Provider.
33. The ICT Department/ICT Services Provider will ensure the upgrade of the anti-virus software on networked desk-top PCs.
34. Remote users and users of portable machines will assist in the upgrade of anti-virus software in accordance with specified mechanisms agreed with the ICT Department/ ICT Services Provider, eg. internet updates
35. Staff should virus-scan all media (including floppy disks, zip disks and CDs) before first use. The ICT Department/ ICT Services Provider will provide assistance and training where required
36. On detection of a virus staff should notify the ICT Department/ ICT Services Provider who will provide assistance.
37. Under no circumstances should staff attempt to disable or interfere with the virus scanning software.

Section Two – Computer Users
Health & Safety
1. Health and safety with regards to computer equipment and computer work stations should be managed within the context of the general and any specific Health & Safety policies and procedures within <NAME OF ORGANISATION>. The Office Services Manager (or other named post) will provide advice.
2. Managers are responsible for ensuring health & safety legislation and procedures with regards to computer equipment are implemented within their Departments.
3. The ICT Manager/ ICT Services Provider will keep abreast of IT-related legislation and advise accordingly.
Training
4. It is the responsibility of Department Managers to ensure appropriate computer training for their staff is identified. The ICT Department/ ICT Services Provider can advise on computer-related training issues.
User Accounts
5. Department Managers should notify the ICT Department/ ICT Services Provider of new members of staff in advance to allow the creation of network and e-mail accounts and system permissions.
6. Department Managers should notify the ICT Department/ ICT Services Provider of the departure of staff to allow the deletion of network and e-mail accounts.
Passwords
7. The ICT Department/ ICT Services Provider will ensure passwording is part of the security strategy of the <NAME OF ORGANISATION> IT system.
8. Users should change their passwords when prompted by the system in the case of networked machines or on a regular basis for standalone machines.
9. Staff are responsible for the security of their password which they should not divulge, even to colleagues.
10. Problems with passwords should be reported to the ICT Department/ ICT Services Provider.
System Usage
11. Users should ensure their computers are fully shut down and turned off at end of day.
12. Computers should be locked or shut down when left unattended for any significant period of time.
13. With regards to file management, Department Managers will determine the top-level folders/directories and associated permissions for their department and inform the ICT Department/ ICT Services Provider. The ICT Department/ ICT Services Provider will create or modify the folders accordingly.
14. Within their respective top-level folders, staff should create sub-folders in accordance with their own departmental guidelines but cannot create new top-level folders.

Section Three - E-mail/Internet
E-Mail
1. The <NAME OF ORGANISATION> e-mail system is a core business application. It should not be used for political, business or commercial purposes not related to <NAME OF ORGANISATION>.
2. The <NAME OF ORGANISATION> e-mail system must not be used to send illegal or inappropriate material.
3. Limited personal use of email is permitted. Managers should ensure there is no abuse of this privilege.
4. It is a condition of employment that all staff consent to the examination of the use and content of their email accounts as required.
5. Global distribution lists should be used appropriately. Email to all staff (spamming) should be used only when appropriate.
6. Staff should minimise the number of messages in their email in-box to ensure maximum efficiency of the delivery system. Folders should be set up and messages filed accordingly.
7. Staff should utilise the archiving facility within the Email system in accordance with current guidelines.
8. Confidential material sent by e-mail should be so marked but sent only with caution.
9. <NAME OF ORGANISATION> retains the right to access and view all Emails sent and received by the Email system. This right is exercised solely through the ICT Department/ICT Services Provider on the instructions of a member of Directorate.

Internet
10. Access to the Internet is provided for business purposes. Limited personal use is permitted and is to be restricted to lunch breaks and periods outwith working time.
11. Staff should not make inappropriate use of their access to the Internet. They must not use <NAME OF ORGANISATION> systems to access pornographic, illegal or other improper material.
12. Staff should not subscribe to chat rooms, dating agencies, messaging services or other on-line subscription Internet sites unless they pertain to work duties.
13. Programs, including screensavers, must not be downloaded from the Internet without authorisation from the ICT Department.
14. <NAME OF ORGANISATION> retains the right to monitor Internet usage by staff. This right is exercised solely through the ICT Department,/ICT Services Provider and, where relating to a specific member of staff, only on instructions from a member of Directorate.
15. It is a condition of employment that all staff consent to the examination of the use and content of their Internet activity as required.
16. Abuse of Internet access will be dealt with severely relative to seriousness. Minor abuse will lead to removal of the privilege of access from an individual’s workstation.

Section Four - Contravention of the IT Policy

1. Staff should be aware of their responsibilities under the Data Protection Act, Computer Misuse Act and the Copyright Design and Patents Act. The ICT Department will provide guidance where required.

2. Contravention of the <NAME OF ORGANISATION> IT Policy or any act of deliberate sabotage to <NAME OF ORGANISATION> computer systems may be considered a disciplinary offence.
Old 10 October 2008, 03:19 PM
  #6  
Dedrater
Scooby Regular
 
Dedrater's Avatar
 
Join Date: May 2008
Posts: 3,957
Likes: 0
Received 0 Likes on 0 Posts
Default

http://www.scvo.org.uk/ITNetwork/ITE...cc_use_ICT.pdf
Old 10 October 2008, 04:25 PM
  #7  
Sonic'
Scooby Regular
Thread Starter
 
Sonic''s Avatar
 
Join Date: Dec 2002
Location: Couch Spud
Posts: 9,277
Likes: 0
Received 0 Likes on 0 Posts
Default

Cheers guys, will take a look at those in a bit

Trending Topics

Old 11 October 2008, 01:53 PM
  #8  
GC8WRX
Scooby Regular
 
GC8WRX's Avatar
 
Join Date: Oct 2007
Location: Wanting the English to come first in England for a change!
Posts: 2,091
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by alpha charlie
The company I work for has a great policy on IT, if someone does something on company IT that the IT section dont like, the person gets a 6 month written warning or fired, then the rest of us hear about it and it goes in the policy.
Since the last event a few months back where the bloke was sacked noone in the office will do anything halfway iffy on the computers, no connecting USB devices or playing audio CD's anymore!
AC
I would never work for a company with such a draconian policy!

No charging mp3 players (or mobiles) via usb, no internt radio while working.

No anything by the sound of it!

I bet the employees are a happy, contented bunch!
Old 11 October 2008, 02:00 PM
  #9  
alpha charlie
Scooby Regular
 
alpha charlie's Avatar
 
Join Date: Mar 2007
Location: Yellowbellyland
Posts: 515
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by T4molie
And yet you're still posting on SN
Only at home matey, Scoobynet doesnt get through the work gateway so cant get on at work
Old 11 October 2008, 02:03 PM
  #10  
alpha charlie
Scooby Regular
 
alpha charlie's Avatar
 
Join Date: Mar 2007
Location: Yellowbellyland
Posts: 515
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by GC8WRX
I would never work for a company with such a draconian policy!

No charging mp3 players (or mobiles) via usb, no internt radio while working.

No anything by the sound of it!

I bet the employees are a happy, contented bunch!
Unfortunately the IT policy wasnt part of the interview so I only became aware along with the others after we had all started. It doesnt really bother me as I dont have a deskbound job so dont live by the laptop. Internet streaming brings the network to a halt so defo no radio streaming, come to think of it there isnt a radio in any of the many offices either.
Guess its the luck of working for an American based company with differing ideas about employees and contentment
AC
Old 11 October 2008, 02:06 PM
  #11  
GC8WRX
Scooby Regular
 
GC8WRX's Avatar
 
Join Date: Oct 2007
Location: Wanting the English to come first in England for a change!
Posts: 2,091
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by Dedrater
..
In other words, if your pc goes down, and you need to finish something quickly, you cant just sort the problem yourself and get on with the task in hand!

You have to raise a ticket with the help desk, then wait 4 hours for some IT bod to come and fix it for you, cos if you try to fix it yourself, you will pi55 off some self important IT manager who will hand out written warnings for fun!

Im glad i work for a free thinking company, i.e, if there is a problem with my laptop, i can try to fix it myself, as long as i back stuff up first, cos its much quicker than waiting fot IT to sort it!

I have fixed problems with pop 1 and 1 in 5 minutes flat, then got on with my work, many times!

IMO most IT departments are counter productive!

In my old place i couldnt even defrag my harddrive without IT's permission, and the amount of **** i dealt with meant it needed doing once a week, so fridays resulted in me asking permission to defrag at 10.00, and getting a yes at 16.00, when im just leaving, and the defrag needed doing before monday morning or my pc would be v slow all monday, so mondays were always a pain in the ****!

Meant to quote the big it policy post btw!
Old 11 October 2008, 02:12 PM
  #12  
GC8WRX
Scooby Regular
 
GC8WRX's Avatar
 
Join Date: Oct 2007
Location: Wanting the English to come first in England for a change!
Posts: 2,091
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by alpha charlie
Unfortunately the IT policy wasnt part of the interview so I only became aware along with the others after we had all started. It doesnt really bother me as I dont have a deskbound job so dont live by the laptop. Internet streaming brings the network to a halt so defo no radio streaming, come to think of it there isnt a radio in any of the many offices either.
Guess its the luck of working for an American based company with differing ideas about employees and contentment
AC
\thats even worse, you sit at you pc all day, and cant use it for anything that isnt directly work related,
what if you had an hours bus journey to work, and needed to charge an mp3 player for the journey home, would that be a flat no from IT, if so they are total clowns IMO!
Old 13 October 2008, 01:16 PM
  #13  
darlodge
Scooby Regular
 
darlodge's Avatar
 
Join Date: Oct 2001
Location: Lovely Lancing in West Sussex
Posts: 3,449
Likes: 0
Received 0 Likes on 0 Posts
Default

Coming from IT role I agree with all the measures (those that I read) that Dedrater posted. They are in place for a reason and it's not to hinder you, it's to benefit the company.

We have a very similar policy in place that our HR department wrote for us and implemented. If you have an efficient IT department all problems can be over come with minimal downtime.

When you enter the office door at 9am why should you be able to continue like you are at home listening to the radio, checking your personal e-mails etc. IT are tasked with providing equipment to meet the business needs, this does not include Internet Radio and charging you personal MP3 player. It may sound harsh but the risk has to be examined by allowing services like internet radio. This may cause the network to slow and may effect customer response times when updating details over the internet, it may effect the call centre teams answering the phones, if each call takes 20 seconds longer how much could this effect over the entire workday?

For small companies it will not matter too much but when you have 2000 users all trying to access streaming media (Internet Radio) it will effect the service and then IT will be too blame for allowing such services. Granted IT might then try and blame the individual/s but it's not the point.

Darren (the efficient cruel IT bod )
Old 13 October 2008, 02:16 PM
  #14  
AndyC_772
Scooby Regular
iTrader: (2)
 
AndyC_772's Avatar
 
Join Date: Mar 2001
Location: Swilling coffee at my lab bench
Posts: 9,096
Likes: 0
Received 0 Likes on 0 Posts
Default

OK, genuine question time:

What is it about IT service that elevates it above, for example, telephone service, postal service, furnishings, HVAC and all the other services that business people need to do their jobs?

I'm not talking about companies whose primary business is IT-related; I'm talking about companies for whom computers are simply a tool and a means to an end. Why should an IT manager expect to be able to get staff fired for disobeying his policies, when the guy in charge of the post room can't? Where's the big difference?
Old 13 October 2008, 02:55 PM
  #15  
darlodge
Scooby Regular
 
darlodge's Avatar
 
Join Date: Oct 2001
Location: Lovely Lancing in West Sussex
Posts: 3,449
Likes: 0
Received 0 Likes on 0 Posts
Default

It's a fair question Andy. Most companies could not function without PC’s but then again most could not function without post and furnishing like you say.

Our IT managers do not have the power to fire\discipline a member of staff. They can suggest that the person is pulled up on something but we (as IT) treat all matters of misuse the same whether it be telephone usage, IT misuse etc. and pass it to HR or have a quiet word. Other departments will be the same, they pass it to HR or bring it up informally with the individual.

It is Human Resources who get to decide how serious a misuse is. If they are stealing post, damaging the pot plants, making calls to 0906 numbers etc. HR will (probably with the assistance of the department manager) get to decide what the risk was and then take action based on that.

Darren
Old 13 October 2008, 03:41 PM
  #16  
WRX_Dan
Scooby Newbie
 
WRX_Dan's Avatar
 
Join Date: Jul 2004
Posts: 19
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by GC8WRX
I would never work for a company with such a draconian policy!

No charging mp3 players (or mobiles) via usb, no internt radio while working.

No anything by the sound of it!

I bet the employees are a happy, contented bunch!
Ditto, With a policy this draconian I'd be suprised if anyone stayed around long.

I work for a $4bn organisation that allow music, phone/Nav software etc, with notification to IT before it's installed, sensible precautions, however the above company appears to have a power crazy IT Manager, whom I assume sticks to the same rules as his staff............Ex Policeman perhaps???
Old 13 October 2008, 08:50 PM
  #17  
Dedrater
Scooby Regular
 
Dedrater's Avatar
 
Join Date: May 2008
Posts: 3,957
Likes: 0
Received 0 Likes on 0 Posts
Default

Its a sample IT Policy you tool^
Old 14 October 2008, 12:51 AM
  #18  
boxst
Scooby Regular
 
boxst's Avatar
 
Join Date: Nov 1998
Posts: 11,905
Likes: 0
Received 0 Likes on 0 Posts
Default

I work for a large company that has quite strict IT policies, although not to the extent that you can't plug in USB toys.

I spent quite a while looking around for ways to get around the 'restrictions': VPN, SSH using Port 21 or 443 etc...

In the end it was so much hassle, the easiest thing to do if I wanted some illicit surfing at work was to buy one of these great 3G dongles. Disable the ethernet connection, plug in the device, look at Scoobynet for 15 minutes and then reconnect the ethernet ...

Steve
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
Iqy7861
Insurance
5
01 October 2015 07:57 PM
piehole1983
Insurance
1
26 September 2015 09:53 AM
shorty87
Other Marques
0
25 September 2015 08:52 PM
riiidaa
ScoobyNet General
1
12 September 2015 11:52 AM
IntegraR
ScoobyNet General
16
02 February 2001 03:27 PM



Quick Reply: Corporate IT Policy



All times are GMT +1. The time now is 04:02 AM.