Never installing unauthorized software on workstations. Securing laptops that contain sensitive information by using cable locks or locking laptops up in drawer or cabinets. Complying with the Laptop and portable Device Encryption Policy. Installing privacy screen filters or using other physical barriers to alleviate exposing data. Exit running applications and close open documents when leaving for extended periods of time. Ensuring that all workstations use a surge protector (not just a power strip) or a UPS (battery backup). Policy Compliance Compliance Measurement IT staff will verify compliance to this policy through various methods, including but not limited to, periodic walk-thru, automated monitoring, internal and external audits, and provide feedback to the workstation owner. Enforcement The Director of Computer Services is authorized to mitigate any non-compliance with this policy at any time either directly or through delegation to staff. Exceptions Any exception to the policy must be approved by the Director of Computer Services. Revision History Date: November 2014 Description: Original Policy Server Malware Protection Policy Purpose The purpose of this policy is to outline which server systems are required to have anti-virus and/or anti-spyware applications. Scope This policy applies to all servers connected to any Gadsden State Community College (GSCC) network. This explicitly includes any system for which the Information Technology (IT) department has the responsibility to administer. This also includes all server systems setup for use at any GSCC campus or facility, regardless of whether the IT department retains administrative obligation or not. Policy IT staff will adhere to this policy to determine which servers will have anti-virus and/or anti-spyware applications installed on them and to deploy such software and/or hardware appliances as appropriate. Anti-Virus All servers not explicitly exempted MUST have an anti-virus application installed that offers scanning protection to files and applications running on the target system if they meet one
Never installing unauthorized software on workstations. Securing laptops that contain sensitive information by using cable locks or locking laptops up in drawer or cabinets. Complying with the Laptop and portable Device Encryption Policy. Installing privacy screen filters or using other physical barriers to alleviate exposing data. Exit running applications and close open documents when leaving for extended periods of time. Ensuring that all workstations use a surge protector (not just a power strip) or a UPS (battery backup). Policy Compliance Compliance Measurement IT staff will verify compliance to this policy through various methods, including but not limited to, periodic walk-thru, automated monitoring, internal and external audits, and provide feedback to the workstation owner. Enforcement The Director of Computer Services is authorized to mitigate any non-compliance with this policy at any time either directly or through delegation to staff. Exceptions Any exception to the policy must be approved by the Director of Computer Services. Revision History Date: November 2014 Description: Original Policy Server Malware Protection Policy Purpose The purpose of this policy is to outline which server systems are required to have anti-virus and/or anti-spyware applications. Scope This policy applies to all servers connected to any Gadsden State Community College (GSCC) network. This explicitly includes any system for which the Information Technology (IT) department has the responsibility to administer. This also includes all server systems setup for use at any GSCC campus or facility, regardless of whether the IT department retains administrative obligation or not. Policy IT staff will adhere to this policy to determine which servers will have anti-virus and/or anti-spyware applications installed on them and to deploy such software and/or hardware appliances as appropriate. Anti-Virus All servers not explicitly exempted MUST have an anti-virus application installed that offers scanning protection to files and applications running on the target system if they meet one
F-8.3.docx