this Plan shall subject the employee to disciplinary action by Agency, up to and including termination. [Note: This plan is If the Agency uses independent contractors directed toward “employees” throughout. as well as employees, the Agency will need to broaden the plan to cover this group, such as by for the term appears and defining to substituting “Agency Users” “employees” wherever “Agency Users” include all categories of the workers.] Agency’s OWNERSHIP OF AGENCY INFORMATION The Agency regards all information contained, sent or received on the Systems and/or Agency’s Agency equipment (e.g., Agency computers and mobile electronic devices, email, text and instant messaging systems, social networks and message boards, whether maintained on Agency equipment/servers or on equipment/servers managed by others) as well as information contained in, sent or received by Agency employees about the Agency or relating to its business on equipment, as the property of the Agency, and the Agency reserves the right to access, review, use and disclose any such information at any time, with or without notice to employee, in sole discretion. Employees have no right to or expectation of privacy with respect to Agency’s any such information (except for the Private Information relating specifically to them), and shall acquire no ownership or control rights over such information. [Note: Any monitoring of conversations and communications using equipment (e.g., phones, Agency’s computers, mobile devices, etc.) or involving Agency business must be conducted in accordance with applicable laws/regulations, and should be expressly described in writing to employees, such as Agency’s in a policy manual. The lack of an expectation of privacy in the work place also can be covered in other Agency policies, such as a policy covering use of electronic communications and equipment. This would also cover other things like the Agency policy on restricting downloading on Agency equipment of third party software not provided by Agency, limiting use of Agency equipment for personal communications, etc.] INFORMATION SECURITY COORDINATOR The Agency has designated [VP of Information Technology (or other title designated for this responsibility)] as the Security to oversee implementation of this “Information Coordinator” Plan. The Information Security Coordinator will be responsible for: 1. Initial implementation of this Plan; 2. Training existing and new employees;
this Plan shall subject the employee to disciplinary action by Agency, up to and including termination. [Note: This plan is directed toward “employees” throughout. If the Agency uses independent contractors as well as employees, the Agency will need to broaden the plan to cover this group, such as by substituting “Agency Users” for “employees” wherever the term appears and defining “Agency Users” to include all categories of the Agency’s workers.] OWNERSHIP OF AGENCY INFORMATION The Agency regards all information contained, sent or received on the Agency’s Systems and/or Agency equipment (e.g., Agency computers and mobile electronic devices, email, text and instant messaging systems, social networks and message boards, whether maintained on Agency equipment/servers or on equipment/servers managed by others) as well as information contained in, sent or received by Agency employees about the Agency or relating to its business on equipment, as the property of the Agency, and the Agency reserves the right to access, review, use and disclose any such information at any time, with or without notice to employee, in Agency’s sole discretion. Employees have no right to or expectation of privacy with respect to any such information (except for the Private Information relating specifically to them), and shall acquire no ownership or control rights over such information. [Note: Any monitoring of conversations and communications using Agency’s equipment (e.g., phones, computers, mobile devices, etc.) or involving Agency business must be conducted in accordance with applicable laws/regulations, and should be expressly described in writing to Agency’s employees, such as in a policy manual. The lack of an expectation of privacy in the work place also can be covered in other Agency policies, such as a policy covering use of electronic communications and equipment. This would also cover other things like the Agency policy on restricting downloading on Agency equipment of third party software not provided by Agency, limiting use of Agency equipment for personal communications, etc.] INFORMATION SECURITY COORDINATOR The Agency has designated [VP of Information Technology (or other title designated for this responsibility)] as the “Information Security Coordinator” to oversee implementation of this Plan. The Information Security Coordinator will be responsible for: 1. Initial implementation of this Plan; 2. Training existing and new employees;
ACT%20PrototypeSecurityPlan.docx