From SJA

Contents 1 Overview 2 Purpose 3 Scope 4 Policy 5 Enforcement

Overview

The Electronic Information system of The St. John Council for Alberta (aka St. John Ambulance Alberta, SJA) represents the largest, single asset of SJA. The protection and security of the electronic information systems is critical to the very survival of SJA. Mobile devices create an additional security concern because of the ease of theft these devices have. These systems are only to be used for business purposes in serving the interests of SJA, and of our clients and customers in the course of normal operations. Effective security is a team effort involving the participation and support of every SJA employee and affiliate who deals with information and/or information systems. It is the responsibility of every computer user to know these guidelines, and to conduct their activities accordingly.

Purpose

The purpose of this policy is to outline the appropriate use of and precautions necessary for SJA Mobile Network Device users.

Scope

This policy applies to employees, contractors, consultants, temporaries, volunteers, and other workers at SJA, including all personnel affiliated with third parties. This policy applies to all equipment that is owned or leased by SJA. Mobile Network Devices include Notebooks, Laptops, Tablets, PDAs, and other equipment that can interface with the SJA Network that is easily movable. This document is superseded by the SJA Network Acceptable Use Policy.

Policy

1. All SJA Mobile Devices MUST be locked up when unattended.
2. All SJA Mobile Devices MUST be password protected.
3. It is the responsibility of the Laptop user to synchronize and / or back up on a weekly basis any data stored on the Laptop. For security reasons it is recommended that only necessary data be stored on the laptop.

It is the responsibility of the laptop user to ensure proper precautions are taken to minimize the risk of theft and/or data loss.

Enforcement

Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.