Policy Manual

 
  6.MEP.6  

Enterprise Network Security      

Type: Procedure                 Category: Information Technology                 Level: Community Care 

Parties: Community Care employees and contractees

Printer Friendly Version: http://apps.comcareme.org/policymanual/default.aspx?code=6.MEP.6&nonav=yes

Supporting References: 

Parent Effective Date Approval Level Revision Dates Last Reviewed
N/A  1-1-2004  Management Team    N/A
Related Document Code Related Document Name Type
6.ME.6 Electronic Security Official Policy

Procedure:  .

  1. The Administrative Services Manager is responsible for establishing, maintaining and implementation.
  2. Definitions:
    1. Information Systems - computer hardware, software, and networks used by the Agency and its employees for communications and the automation of processes.
    2. Global Internet - a worldwide communications network implemented using standard protocol that connects networks and organizational computer facilities
  3. Community Care has established a connection to the Global Internet Network. This connection has been designed to assure that other users of the network cannot access our agency's information systems. It is only through this single connection to the Global Internet Network that Community Care can assure security for its networked information systems. The Agency's policy is that no person has authority to establish a separate link of any of the Care's networked computers to any external computer or network, including, but not limited to, the Global Internet Network. The use of dial-up equipment to interconnect networks is strictly forbidden.
  4. The use of mediums to connect from any Community Care computer to generally available commercial service (AT&T, Verizon, AOL, etc.), or data transfer between vendors or contractors, etc. is prohibited.
  5. No authorized user is allowed to provide their user ID and/or passwords to an unapproved person, permitting the unapproved person(s) access to the Agency's Information Systems.
  6. No employee or contractor is permitted to install on any information system, encryption software that would otherwise preclude the Agency's rights to monitor and retrieve data.
  7. It shall be the condition of individual access to Care's Enterprise Network that each person understands the requirements of this policy and agrees to comply with its provisions. Each employee upon orientation and/or approved communication vehicle has agreed in principle and practice to all aspects of this policy.