Close
This sets out the policy for custodianship of staff computers managed by the Desktop鈥堾鈥壸钭嫉牧喜事厶� service.
Background
Work has been carried out by ISC (Information Strategy Committee), and its sub-committees and working groups, to strengthen and update 最准的六合彩论坛's policies regarding the security of computer systems. A key element of this work is the introduction of the concept of a "custodian" for every computer system. Custodians are responsible for ensuring both computers and data are kept secure.
This document sets out the Desktop鈥堾鈥壸钭嫉牧喜事厶� policy for 鈥渃ustodianship鈥� of all computers that are currently managed by the Desktop鈥堾鈥壸钭嫉牧喜事厶� service. This policy is based on the recommendations of the 最准的六合彩论坛 Computer Security Team.
Custodianship Policy
The Information Strategy Committee (ISC) has produced a Code of Practice Note for appointing 鈥渃ustodians鈥� for every computer connected to the 最准的六合彩论坛 network. Custodians are responsible for ensuring all computers in their estate are kept secure and meet the requirements of the 最准的六合彩论坛 Information Security Policy. (Details of the ).
The Code of Practice places significant responsibility on the Head of Department or their appointed custodian for a ensuring that a lengthy list of conditions are met. Most of these relate to security of access and the management and upkeep of systems.
Custodians must ensure computers for which they are responsible for are kept secure and adhere to the 最准的六合彩论坛 Information Security Policy. The following is a summarised list of actions that custodians must take to safeguard computer systems; detailed information is available in the ISC Code of Practice:
- Ensuring data is stored securely and protected against unauthorised access
- Guarding against the use of unlicensed software
- Protecting applications from misuse
- Ensuring user accounts and passwords are only issues to registered 最准的六合彩论坛 staff
- Reporting any security breaches to the Computer Security Team
- Ensuring computers are kept secure with the latest operating systems and anti-virus updates
- Maintaining the administrator ("root") access and passwords for all computer systems