Project

Only available on StudyMode
  • Download(s) : 70
  • Published : February 26, 2013
Open Document
Text Preview
Richman Investments

It is the goal of Richman Investments to implement the controlled use of removable media devices that transfer information by all users who have access to any means of data within the company.
Objective
This form is an official Richman Investments document pertaining to the establishment of principles and working practices that are to be abided by all users in order for data to be safely stored and transferred by means of a removable device. The importance of controlling removable media and the objective of this policy is to: 1.Prohibit any unauthorized disclosure of information as may be necessary to company policy. 2.Maintain data integrity.

3.Build network integrity by instilling confidence and trust with data on the network. 4.Keep high standards of security with the use of protected and restricted data. 5.Avoid malicious network intrusions.

6.Prevent unintended or malicious harm on the Richman Investments data network.
Applicable Parties
This policy applies to all Richman Investment employees, members, committees, business partners, third party IT services, guests, or anyone who is approved access to the data network, IT hardware resources, or any equipment with means of access to files within Richman Investments.

Removable Devices Defined
1.USB Memory sticks (flash drive)
2.USB or external hard drive
3.Media Card Readers
4.Embedded microchips (smart cards, mobile phone SIM cards) 5.MP3 or IPods
6.Cameras
7.Any media device with storage space with means of transfer via Bluetooth, WIFI, or USB cord. 8.Any device with means to record data

Risk Assessment
Richman Investments recognizes the risks associated with users using and accessing data in order to properly conduct assigned tasks, jobs, or conduct official employer business. Information is often shared throughout the network and possibly with external sources or clients. Securing ALL data and ensuring network integrity is of the utmost importance. Any loss of the ability to access data or network interference could have a tremendous impact on the efficient operation of Richman Investments. It is essential for all of the information systems to endure continued operation and that all Integrity, Confidentiality, and Availability of information is maintained at the appropriate level of the needs of Richman Investments.

This policy aims to reduce the following risks:
1.Damage to Richman Investment reputation as a result of misuse or loss of information. 2.Damage to Richman Investment clients or assets as a result of misuse or loss of data. 3.Contamination of networks or equipment through the introduction of a virus, malware, key logging device, spyware, adware, or any malicious subject. 4.Disclosure of restricted or protected data as a result of theft, careless use, or misuse. 5.Potential legal liabilities as a result of theft, careless use, misuse, or loss of data.

Policy Application
Richman Investments prohibits the use of all personal removable media devices. Approval of use may be granted in special business related circumstances or is required and approved under an employee’s job title. The benefits pertaining to the business must be greater than the risks for acceptable use of removable media access to be granted. Access and approval must be granted by the IT department and proper supervisorial signatures must be obtained. A strict time limit will be implemented for all granted waivers pertaining to removable media.

Removable Media Procurement
After access is approved or granted, removable media and software for use on the network must only be of that of the IT department’s outsourced provider. Personnel media devices are prohibited and will call for immediate termination of use with the storage or recording of data of Richman Investments on these devices. The only approved media on the Richman Investment IT network is that that has been:

1.Approved by the IT department...
tracking img