Acceptable Use Policy (AUP) Model for Remote Data Backup
Welcome to Storage File, a website for buyers that enables you to get quotations from providers of Remote Data Backup solutions in the US.
The acceptable use policy covers the important points that users should be aware of when using a company network. Users should be given a printed copy of the policy and a copy should be signed by the user and retained on record. This record will prove that the user has read and understood the policy and agrees to its terms.
1. Purpose
The objective of this document is to summarise the responsibilities of all employees concerning information security.
The aim of the content of this document is:
- To help employees avoid contravening company policy and legal obligations.
- To help employees maintain good external relationships by the proper handling of information.
- To protect the company from accidental loss, fraud and legal action.
2. General responsibilities for information security
- You must ensure that company assets (physical assets, information and the company's reputation) for which you are responsible are used and maintained in a secure manner.
- You must regard all company sensitive information as being confidential and you must not disclose it to anyone unless you have approval from your line manager. They should be able to provide you with guidance if the sensitivity of the information is unclear.
- You must not knowingly perform any action that could interfere with the integrity or normal operation of the company.
- Information and material that has come into your possession as a result of your employment by <company name> belongs to the company and must not be removed or used in any way that might result in a loss to the company. Examples are contacts or procedures that might be unique to <company name> and that would not have come into your possession had you not been employed by <company name>. <Company name> will seek an injunction to prevent any breach of this requirement and will look to the offender to compensate it for any loss.
3. Physical security
- You must not enter secure computing areas unless authorised to do so.
- You must not take company I.S. property off-site without formal authorisation. The organisation reserves the right to search individuals leaving company premises.
- You must ensure that any laptop for which you are responsible is securely locked away when left on company premises overnight.
4. Access to Information
- You must not connect to the <company name> network or use any computing devices, e.g. PCs palmtops, handheld organisers, portable storage devices etc., to process and store company information unless you have been given formal authorisation. This applies whether the equipment is to be used on <company name> premises or elsewhere, e.g. at your home.
- You are responsible for your logon ID and password and any actions carried out using it.
- You must not reveal your password to any person or use another person's logon ID without their prior authorisation. In such a case, access to their information must be used only for the purpose for which it was authorised.
- You must follow the <company name> guidelines on how to choose passwords that will not be easy for another person to guess.
- You must ensure that information is stored on network drives and not on local hard disks, unless your computer is not permanently connected to the company's network, e.g. laptops.
- You must ensure that your workstation is protected from unauthorised access whenever leaving it unattended. This may be achieved with the "Lock Computer" feature (where available) or by closing all applications and logging off.
- You must not attempt to access information in areas beyond the scope of your job.
- You must ensure that confidential documents cannot be seen by unauthorised personnel.
- You must lock away sensitive information when it is not required.
- You must remove sensitive information from printers and fax machines immediately.
- You must follow company guidelines for the use of data encryption to protect sensitive information.
- You must ensure that re-usable media, in your possession or under your responsibility, containing sensitive information is securely erased or physically destroyed prior to removal from the organisation.
- You must follow company guidelines for the secure handling of all sensitive information to be sent off company premises.
View all Remote Backup articles
