IT Staff Systems and Data Access Policy

IT professionals, such as system and network administrators, help desk staff, management personnel and sometimes external vendor representatives, are routinely provided full access to company servers, network devices and data so that they can effectively perform their jobs.

This policy from TechRepublic Premium provides guidelines for the company and its IT staff to ensure the appropriate administration of and access to critical systems and confidential data. It also includes procedures to follow and methods for monitoring to make sure that these requirements are consistently met.

From the policy:

Any external individuals who are provided access to company data should be monitored at all times. For instance, a vendor support representative who is allowed to work on a system housing confidential data via remote means should be attended to at all times. Never provide remote access capability or passwords to these individuals without management or IT department consent. If direct monitoring is not possible, these individuals should be vetted and held to confidentiality agreements to ensure data and system integrity.

The download comprises an eight-page PDF and Word document.

Previously priced at $99, this is now available to download for $19. Or free with Premium annual subscription: click here to find out more.

TIME SAVED: It took 16 hours of writing, editing and research to create this content.

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts