Acceptable Technology Use Policy

Last updated: 2023-07-25

This policy is focused primarily on technical management and security and does not seek to address business or human resources concerns. When in doubt, speak with your supervisor.

Goals

The primary goal of this policy is to protect MoveIt technology assets and information. This includes both in-office and remote access uses.

Acceptable Use

MoveIt IT systems, when used either in-office or remotely, are to be used for business purposes. Nominal personal use is allowed, but never in violation of any MoveIt policies.

Restricted Activies

  1. All software shall be installed and/or approved by an IT administrator. This allows the IT department to ensure that ongoing security and licensing needs are met.
    • In the event that software must be installed without prior approval to meet a business need, contemporaneous notification of the installation shall be sent to your IT administrator for approval.
    • This requirement applies to both computers in the office and MoveIt laptops used remotely.
  2. VPN connections shall be disconnected when not in use. This protects the MoveIt network from access when MoveIt employees are not in control.
    • This requirement applies whether the remote device is a MoveIt device or personally owned.
    • VPN Connections must always be disconnected before allowing a non-employee to use the device, no matter how briefly.
    • VPN Connections may only remain connected during breaks if the MoveIt employee retains control of the device during the break.
  3. Workstations shall be locked when unattended to prevent unauthorized access.
    • The IT Department configures devices to lock automatically after 10 minutes of inactivity.
  4. Passwords to MoveIt resources (email, VPN, etc) shall not be saved on devices that are shared with people who are not MoveIt employees. This protects MoveIt systems from both accidental and malicious misuse.
    • As a best practice, we suggest that employees utilize separate user accounts on personal machines that are shared with non-employees. This helps prevent accidental misuse and security compromise. The IT Department can provide assistance with setting this up.
    • If a separate user account and password is used to isolate MoveIt resources, passwords may be saved within applications protected by that account.
    • MoveIt owned devices are not to be used by anyone that are not employed with MoveIt.