MOBILE DEVICE POLICY

Security Policy For The Use Of Mobile



Security Policy For The Use Of Mobile

Mobile devices are important to the Council. They allow us to work more effectively in places where using an ordinary computer would be impractical. Mobile devices such as Pocket PCs, Digital Cameras and Mobile Phones allow us to achieve more by providing facilities on the move such as seeing our GroupWise calendars, taking pictures, getting reminders of appointments, looking up phone numbers. In the future, with the right systems at the Council, mobile workers could become less tied to a desk with a computer on it. Information about jobs will be stored and retrieved electronically wherever they are. Customers will be able to sign for services on the screen of a mobile computer. Eventually, many of our staff will be using mobile devices to enable them to work more efficiently and effectively. This is why this document and the policies and procedures contained in it are important.

1.Although mobile devices have the potential to deliver significant benefits (better services, increased efficiency), they also carry a number of risks. The key risks are:

Cost of loss or damage to expensive equipment as a consequence of theft, carelessness or misuse.

Health and safety problems for users (as with any new way of working).

Introduction of viruses to the computer network if devices become infected.

Disruption of the computer network if incompatible devices are connected.

Increased IT support costs.

Loss of information contained on mobile devices and consequent disruption to work.

Disclosure of confidential information stored on devices as a consequence of loss of devices or careless use.

The aim of this policy is to enable the Council to benefit from the new technologies that are available, whilst managing the above risks. The risks are unlikely to be eliminated, but can be mitigated through compliance with this policy. Given that there will remain inherent risks associated with the use of mobile devices, it is important that clear business benefits can be demonstrated, wherever they are used, which outweigh those risks.

2.The key to managing all of the above risks is ensuring that users conform to some basic rules and good practice guidelines. For that reason all users will be asked to sign an Acceptable Use Agreement, acknowledging the responsibilities attached to the device they are using.

Mobile Devices and their uses

The types of Mobile Device currently used within the Council are:

Laptops - effectively desktop computers, that can be transported anywhere and used without requiring mains power for the most part. Laptops allow their custodians to look at, create or modify information stored on them.

Mobile Phones - the amount of information the average mobile phone can hold increases year by year. For example a very basic current mobile phone can hold first and last names along with telephone numbers for hundreds of people.

Digital Cameras - Pictures for work purposes can be taken and then subsequently transferred into the corporate network. Computer files of other types could be transferred to such devices.

Pocket PCs (PDAs)- the Council's preferred product is ...