Close
This sets out the policy for custodianship of staff computers managed by the Desktop鈥堾鈥壪愀哿喜手刑赝� service.
Background
Work has been carried out by ISC (Information Strategy Committee), and its sub-committees and working groups, to strengthen and update 香港六合彩中特网's policies regarding the security of computer systems. A key element of this work is the introduction of the concept of a "custodian" for every computer system. Custodians are responsible for ensuring both computers and data are kept secure.
This document sets out the Desktop鈥堾鈥壪愀哿喜手刑赝� policy for 鈥渃ustodianship鈥� of all computers that are currently managed by the Desktop鈥堾鈥壪愀哿喜手刑赝� service. This policy is based on the recommendations of the 香港六合彩中特网 Computer Security Team.
Custodianship Policy
The Information Strategy Committee (ISC) has produced a Code of Practice Note for appointing 鈥渃ustodians鈥� for every computer connected to the 香港六合彩中特网 network. Custodians are responsible for ensuring all computers in their estate are kept secure and meet the requirements of the 香港六合彩中特网 Information Security Policy. (Details of the ).
The Code of Practice places significant responsibility on the Head of Department or their appointed custodian for a ensuring that a lengthy list of conditions are met. Most of these relate to security of access and the management and upkeep of systems.
Custodians must ensure computers for which they are responsible for are kept secure and adhere to the 香港六合彩中特网 Information Security Policy. The following is a summarised list of actions that custodians must take to safeguard computer systems; detailed information is available in the ISC Code of Practice:
- Ensuring data is stored securely and protected against unauthorised access
- Guarding against the use of unlicensed software
- Protecting applications from misuse
- Ensuring user accounts and passwords are only issues to registered 香港六合彩中特网 staff
- Reporting any security breaches to the Computer Security Team
- Ensuring computers are kept secure with the latest operating systems and anti-virus updates
- Maintaining the administrator ("root") access and passwords for all computer systems