The provision of Notebook computers by the Council enables Council to better assimilate the equipment into its network environment and to ensure that version control is maintained with software, anti-virus is installed and a personal firewall loaded and correctly configured.  As Councillors perform most of their work externally, Council is effectively extending their network boundaries and must be able to control the associated risks.

This policy seeks to prevent computer hardware and systems from being affected by non-business related activities and includes prohibiting use of the equipment by family members. No additional software is to be loaded onto the equipment or downloaded from the internet.  The provisions of the Acceptable Use Policy apply to Councillors.

Equipment must only be maintained and upgraded by qualified Council personnel to ensure that manufacturers warranties remain valid and insurance conditions are met.  It is also important that information is not lost due to the equipment malfunctioning and that configuration settings remain compatible with those of Council's computer systems and networks.

A modem allows Councillors to connect to Council's internal systems and access documents that they have been given permission to read and change.  A printer will also be provided to print out Council documents on the basis that the Councillor replaces the ink cartridges when they run out.

Council  has  standard  applications  that  users  can  run  on  personal computers and workstations.  Councillors must not install other software packages without first obtaining advance permission from the IT Manager and having the installation performed by Council IT Helpdesk staff.  Automatic software installation routines are not permitted to run on council computers and workstations.

Equipment is only on loan from the Council and therefore must be returned when the Councillor no longer provides services to Council.  It must also be returned for replacement when its lease expires, when required for maintenance or when it is due for replacement by more modern equipment. 

Councillors are subject to the same acceptable use requirements as other computer users and must be made aware of their obligations to protect Council information.  In many cases Councillors are not aware of the potential implications of their actions and must be made informed of the risks inherent with using council equipment and accessing council information. 

       

ISO 27002 Standard 7.1.3

SIGS Chapter 9 Control of Access to

    Information Systems 54

SIGS Chapter 9 Control of Access to

    Information Systems 56

     BS 25999 Standard No Match

SOX Section 404 No Match

PCI DSS Standard 12.3.5