1. BTEC NAT Unit 15 - Organisational Systems Security ORGANISATIONAL SYSTEMS SECURITY Unit 15 Lecture 7 EMPLOYMENT CONTRACTS & CODES OF CONDUCT

2. BTEC NAT Unit 15 - Organisational Systems Security Learning Objectives We need to examine a few more policies normally associated with Human Resources and look at how they can incorporate security issues Common Policies: Hiring Policy Hiring Policy Separation of Duties Separation of Duties Disciplinary & Investigation procedures Disciplinary & Investigation procedures Training & Communication Training & Communication

3. BTEC NAT Unit 15 - Organisational Systems Security Hiring Policy Hiring Policy Recruitment / promotion of employees Recruitment / promotion of employees Must not conflict with National Employment Law Must not conflict with National Employment Law Hiring will look at the following: o Employee background & employment record o Criminal record & references o Initial assessment or probationary period

4. BTEC NAT Unit 15 - Organisational Systems Security Separation of Duties Separation of Duties Do not rely on one individual to maintain overall security Team members – each have critical duties to manage Deputies to cover for absence / departure

5. BTEC NAT Unit 15 - Organisational Systems Security Disciplinary & Investigation Procedures Disciplinary & Investigation Procedures Fair, confidential & legally acceptable Fair, confidential & legally acceptable Comply with set procedures Comply with set procedures False accusations – Legal actions False accusations – Legal actions The Steps: The Steps: Suspension with pay Suspension with pay Independent investigation Independent investigation Fair & impartial Fair & impartial Police involvement if criminal matter Police involvement if criminal matter

6. BTEC NAT Unit 15 - Organisational Systems Security Training & Communication Training & Communication Staff must receive the necessary training Staff must receive the necessary training Maintain regular communication with staff Maintain regular communication with staff Ensure awareness of responsibilities Ensure awareness of responsibilities

7. BTEC NAT Unit 15 - Organisational Systems Security Learning Objectives Codes of Conduct Employees to sign and agree to a variety of policies. Rules of the organisation and security needs Email Usage policy Email Usage policy Internet Usage policy Internet Usage policy Software Acquisition & Installation policy Software Acquisition & Installation policy User Area Usage policy User Area Usage policy Account management policy Account management policy

8. BTEC NAT Unit 15 - Organisational Systems Security Email Usage Policy Email Usage Policy What is unacceptable – sending emails What is unacceptable – sending emails Acceptable size & type of attachments Acceptable size & type of attachments Management of mailbox contents Management of mailbox contents No stalking, harassment, spamming No stalking, harassment, spamming No external exchange of corporate info No external exchange of corporate info The network management has the right to monitor all emails

9. BTEC NAT Unit 15 - Organisational Systems Security Internet Usage Policy Internet Usage Policy What sites can be visited What sites can be visited What cannot be downloaded What cannot be downloaded Network management has the right to monitor network traffic

10. BTEC NAT Unit 15 - Organisational Systems Security Software Acquisition & Installation Policy Software Acquisition & Installation Policy Stop personal & unlicensed software being installed on the system Stop personal & unlicensed software being installed on the system No duplication of software No duplication of software Prevent compatibility problems Prevent compatibility problems Prevent transmission of worms, viruses & trojans Prevent transmission of worms, viruses & trojans

11. BTEC NAT Unit 15 - Organisational Systems Security User Area Usage Policy User Area Usage Policy Storage space for a large number of users Storage space for a large number of users Define what users cannot store – limits Define what users cannot store – limits Storage space will vary according to employee’s role Storage space will vary according to employee’s role eg software developers

12. BTEC NAT Unit 15 - Organisational Systems Security Account Management Policy Account Management Policy Responsibilities Network management: Network management: Maintain level of service Users: Users: Current & updated passwords Non-sharing – personal details

13. BTEC NAT Unit 15 - Organisational Systems Security Activity 7 Activity 7 Codes of Conduct & Usage Policies 1. Read through the College IT usage policy 2. Examine the example Codes of Conduct 3. Look at Professional bodies websites and check for policies / codes of conduct 4. How would you change or add to the college policy to make usage more secure?