ABC Credit union: Acceptable Use Policy

1. Purpose

The purpose of this policy details the acceptable and unacceptable use of ABC Credit Union devices and services for the purposes of employee protection from viruses as well as company protection from compromised data and other legal allocations.
2. Scope

This policy applies to all employees, partnered businesses, and any other persons or organizations that utilize equipment and services owned or leased by ABC Credit Union.
3. Policy

3.1 General Use and Ownership

Users must be aware that any data created or stored on ABC Credit Union systems and because of this Administration cannot be held responsible for data confidentiality found on any device belonging to ABC Credit Union.

All ABC Credit Union employees are responsible for exercising what constitutes “Acceptable Use” of workstations and their applications as well as any attached network devices i.e. Printers, Telephony, ect. Guidelines for this policy will be created by individual departments, however any questions regarding policy adherence must be brought to the respective departmental managers.

All internal data will adhere to an encryption policy per ABC Credit Union IT. For guidelines on this policy, please consult our Information Sensitivity Policy.

Internal network traffic will be monitored by ABC Credit Union IT per Audit Policy ABC Credit Union reserves the right to audit their enterprise on a periodic basis to ensure compliance with this policy. 3.2 Security and Proprietary Information

3.2.1. Any user interface contained on ABC Credit Union systems must be classified as either confidential or non-confidential, which will be defined by Human Resources in corporate confidentiality guidelines.

3.2.2. All user account authentication and authorization methods, including usernames and passwords, must be kept private and password changed on a periodic basis per Password Policy.

3.3.3. All workstation equipment must be secured from unauthorized access (i.e. password-protected screensaver, Workstation BIOS password, etc.).

3.3.4. If laptops are to be utilized in future business operations, it will be the objective of ABC Credit Union IT to establish basic security guidelines concerning usage and data encryption.

3.3.5. Any personal opinions expressed by ABC Credit Union employees in any medium are strictly their own and do not reflect those of the company or its affiliates.

3.3.6. Employees must exercise caution when opening e-mail attachments from unknown senders which may contain malicious code (Viruses, E-Mail Bombs, Trojans). 3.3 Unacceptable Use

The following lists activities that are defined as being Unacceptable usage of ABC Credit Union systems and devices, except those tasks required to perform legitimate job responsibilities (ex. IT employees disconnecting cables to troubleshoot connectivity issues) . Under no circumstances is any Stax Staffing employee authorized to engage in any activity that is illegal under law.

The lists below will provide a general framework for activities which fall into the category of Unacceptable Use.

The following activities are strictly prohibited, with no exceptions:

System and Network Activities 1. The installation and distribution of illegitimate software or other software not licensed for use by Stax Staffing.

2. Unauthorized reproduction of unlicensed copyrighted materials of any kind.

3. Exporting software or technical information without the consent of the rights holder.

4. Introducing malicious code and/or programs into any Stax Staffing system.

5. Revealing any account information (username, password) to anyone but authorized personnel.

6. Usage of any Stax Staffing resource to engage and/or promote a hostile or unprofessional work environment.

7. Committing fraudulent or unauthorized business under a Stax Staffing moniker.

8. Unauthorized access and disruption of Stax Staffing networks including but not limited to: Unauthorized information gathering and entry to physical and logical devices (i.e. Port Scanning, Backdoor Access), and disrupting normal network traffic via malicious code (i.e. Denial Of Service).

9. Providing information concerning staff employees and clientele to parties outside of Stax Staffing.

Email and Communication Activities

1. Sending unsolicited email message, including those of an advertising nature, to individuals without their consent. This shall include “mass mailing” from any e- mail address to any other email or communication superlative (i.e. Newsgroups).

2. Any form of harassment via email or phone, whether through language, frequency, or size of message.

3. Unauthorized forgery of email headers.

4. Solicitation of email from a third-party email with malicious intent.
4. Enforcement

Any employee found to be in violation of this policy may be subject to disciplinary action, up to and including termination of employment.