User Responsibilities Policy

These guidelines are intended to help you make the best use of the computer resources at your disposal. You should understand the following.

You are individually responsible for protecting the data and information in your hands. Security is everyone's responsibility.
Recognise which data is sensitive. If you do not know or are not sure, ask.
Even though you cannot touch it, recognise information is an asset.
Use the resources at your disposal only for the benefit of the Organisation.
Understand that you are accountable for what you do on the system.
If you observe anything unusual, tell your direct manager. When using the Organisation's computer systems you should comply with the following guidelines.

Choose a password that would be hard to guess
Log off or lock your PC before you leave your workstation. This is important if you are working on sensitive information or leaving your workstation for any length of time.
Ask people their business in your area, if they look as though they do not belong there
Protect equipment from theft and keep it away from food and drinks
Ensure that all important data is saved to the company file servers provided
Make sure that authorisation is granted by the IT department on every occasion floppy disks, CD's, DVD's and USB sticks are brought in to the Organisation and connected to company equipment
Do inform the I.T. Department immediately if you think that any breach in security may have occurred in your work area.

Write down your password
Share or disclose your password
Give others the opportunity to look over your shoulder if you are working on something sensitive
Use shareware (software downloaded from the Internet or on PC magazine covers).
Duplicate or copy software
Install any software on your machine or alter its configuration, this work may only be undertaken by the I.T. Department
Any allow individual to connect any IT equipment to the company network unless you are confident that they have the express permission of the IT Department to do so
Connect any company equipment, including laptops to any other computer network, this includes domestic internet connections

Please note the following:

Your PC/Workstation/Terminal Server Session will be audited periodically. Logins to, and use of the Organisation's network are monitored and audited.

Failure to comply with the organisation's security policy may lead to disciplinary action.