VENDOR ACCESS POLICY Introduction Vendors play an important role in the support of hardware and software management, and operations for customers. Vendors can remotely view, copy and modify data and audit logs, they correct software and operating systems problems; they can monitor and fine tune system performance; they can monitor hardware performance and errors; they can modify environmental systems, and reset alarm thresholds. Setting limits and controls on what can be seen, copied, modified, and controlled by vendors will eliminate or reduce the risk of loss of revenue, liability, loss of trust, and embarrassment to the NYE. Purpose The purpose of the Vendor Access Policy is to establish the rules for vendor access NYE to information resources and support services (A/C, UPS, PDU, fire suppression, NYE etc.), vendor responsibilities, and the protection of information. NYE Vendor Access Policy Vendors must comply with all applicable policies, practice standards and NYE agreements, including, but not limited to: Safety Policies Privacy Policies Security Policies Auditing Policies Software Licensing Policies Acceptable Use Policies Vendor agreements and contracts must specify: The information the vendor should have access to NYE How information is to be protected by the vendor NYE Acceptable methods for the return, destruction or disposal of information NYE in the vendor’s possession at the end of the contract
VENDOR ACCESS POLICY Introduction Vendors play an important role in the support of hardware and software management, and operations for customers. Vendors can remotely view, copy and modify data and audit logs, they correct software and operating systems problems; they can monitor and fine tune system performance; they can monitor hardware performance and errors; they can modify environmental systems, and reset alarm thresholds. Setting limits and controls on what can be seen, copied, modified, and controlled by vendors will eliminate or reduce the risk of loss of revenue, liability, loss of trust, and embarrassment to the NYE. Purpose The purpose of the NYE Vendor Access Policy is to establish the rules for vendor access to NYE information resources and support services (A/C, UPS, PDU, fire suppression, etc.), vendor responsibilities, and the protection of NYE information. Vendor Access Policy Vendors must comply with all applicable NYE policies, practice standards and agreements, including, but not limited to: Safety Policies Privacy Policies Security Policies Auditing Policies Software Licensing Policies Acceptable Use Policies Vendor agreements and contracts must specify: The NYE information the vendor should have access to How NYE information is to be protected by the vendor Acceptable methods for the return, destruction or disposal of NYE information in the vendor’s possession at the end of the contract
InformationSecurityPolicyTemplate.docx