Objective: Ensure safe and organized use of office computers, protecting information and optimizing performance while adhering to cybersecurity rules.
Scope: All office computers and all authorized users.
Organization Duties:
- Equipment: Purchase and maintain computers according to security standards.
- Distribution: Distribute computers based on job needs and grant appropriate permissions.
- Storage Media: Regulate use of external storage, requiring encryption for sensitive data.
- Network Connection: Require prior approval for network connections, adhering to network security policy.
- Auditing: Conduct periodic audits for policy compliance.
System Administrator Duties:
- Preparation: Prepare computers with required systems and applications.
- Maintenance: Handle computer repairs and modifications according to change policy.
- Storage Management: Manage storage media to prevent data loss or leaks.
- Security: Set BIOS and OS passwords, activate screensaver password protection.
- Updates: Regularly update software and operating systems.
- Records: Create and manage computer entry and exit records.
User Duties:
- Safe Usage: Use computers according to policy instructions.
- Password Protection: Protect and do not share passwords.
- Reporting: Report technical problems, do not attempt repairs.
- Network Connection: Require approval for external device or storage connections.
- Media Inspection: Scan storage media for viruses before use.
- No Personal Use: Avoid using computers for personal purposes.
Practical Simulation (Dr. A - Acceptable Use):
- Password protection.
- Saving files on secure university servers.
- Using secure VPN for internet access.
- Reporting technical problems to IT.
- Approving IT-initiated software updates.
- Result: Full policy compliance, information security, and network protection.
Findings and Recommendations:
- Dr. A: Compliant, maintained security.
- Recommendations:
- Strengthen awareness training.
- Tighten device monitoring.
- Activate advanced warning systems.
- Apply penalties for violations.
