Allari: Remote Access Policy

ict-policy-update-img01.jpg
Allari:  Remote Access Policy
  1. Overview
    Remote access to our corporate network is essential to maintain our team's productivity, but in many cases this remote access originates from networks that may already be compromised or are at a significantly lower security posture than our corporate network. While these remote networks are beyond the control of Allari policy, we must mitigate these external risks the best of our ability.
  2. Purpose
    The purpose of this policy is to define rules and requirements for connecting to Allari 's network from any host. These rules and requirements are designed to minimize the potential exposure to Allari from damages which may result from unauthorized use of Allari resources. Damages include the loss of sensitive or company confidential data, intellectual property, damage to public image, damage to critical Allari internal systems, and fines or other financial liabilities incurred as a result of those losses.
  3. Scope
    This policy applies to all Allari employees, contractors, vendors and agents with a Allari-owned or personally-owned computer or workstation used to connect to the Allari network. This policy applies to remote access connections used to do work on behalf of Allari, including reading or sending email and viewing intranet web resources. This policy covers any and all technical implementations of remote access used to connect to Allari networks.
  4. Policy
    It is the responsibility of Allari employees, contractors, vendors and agents with remote access privileges to Allari's corporate network to ensure that their remote access connection is given the same consideration as the user's on-site connection to Allari.

    General access to the Internet for recreational use through the Allari network is strictly limited to Allari employees, contractors, vendors and agents (hereafter referred to as "Authorized Users"). When accessing the Allari network from a personal computer, Authorized Users are responsible for preventing access to any Allari computer resources or data by non-Authorized Users. Performance of illegal activities through the Allari network by any user (Authorized or otherwise) is prohibited. The Authorized User bears responsibility for and consequences of misuse of the Authorized User's access. For further information and definitions, see the Acceptable Use Policy.

    Authorized Users will not use Allari networks to access the Internet for outside business interests.

    For additional information regarding Allari's remote access connection options, including how to obtain a remote access login, free anti-virus software, troubleshooting, etc., go to the internal Remote Access Services website.
    1. Requirements
      1. Secure remote access must be strictly controlled with encryption (i.e., Virtual Private Networks (VPNs)) and strong pass-phrases. For further information see the Acceptable Encryption Policy and the Password Policy.
      2. Authorized Users shall protect their login and password, even from family members.
      3. While using a Allari-owned computer to remotely connect to Allari's corporate network, Authorized Users shall ensure the remote host is not connected to any other network at the same time, with the exception of personal networks that are under their complete control or under the complete control of an Authorized User or Third Party.
      4. Use of external resources to conduct Allari business must be approved in advance by InfoSec and the appropriate business unit manager.
      5. All hosts that are connected to Allari internal networks via remote access technologies must use the most up-to-date anti-virus software (place url to corporate software site here), this includes personal computers. Third party connections must comply with requirements as stated in the Third Party Agreement.
      6. Personal equipment used to connect to Allari's networks must meet the requirements of Allari-owned equipment for remote access as stated in the Hardware and Software Configuration Standards for Remote Access to Allari Networks.
  5. Policy Compliance
    1. Compliance Measurement
      The Infosec team will verify compliance to this policy through various methods, including but not limited to, periodic walk-thrus, video monitoring, business tool reports, internal and external audits, and feedback to the policy owner.
    2. Exceptions
      Any exception to the policy must be approved by the InfoSec team in advance.
    3. Non-Compliance
      An employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.
  6. Enforcement
    Any Allari personnel found in violation of this policy may be subject to disciplinary action, up to and including termination of employment. Any third party partner company found in violation may have their network connection terminated.
  7. Related Standards, Policies & Processes
    Please review the following policies for details of protecting information when accessing the corporate network via remote access methods, and acceptable use of Allari's network:
    • Acceptable Encryption Policy
    • Acceptable Use Policy
    • Password Policy
    • Third Party Agreement
    • Hardware and Software Configuration Standards for Remote Access to Allari Networks
  8. Definitions and Terms
    None

MORE ARTICLES YOU MAY LIKE

What is Downtime?

Downtime is another way of saying a system is not available to the users. It is also referred to as an outage. While downtime can be planned months in advance, it is typically not and is often a surprise.

 

5 Reasons Multitasking is Bad for IT Productivity

When it comes to IT operations, multitasking seems to be a prerequisite. Quite often it's even written into the job posting. However, research is revealing that multitasking may do more damage than good.

It's the Process, Stupid!

The greatest invention in the last 200 years isn't a product, but rather the scientific method, the process which has been used to create millions of products. Today, when change is exponential, a focus on process over products is even more important.

 

OUR PEOPLE MAKE THE DIFFERENCE

About Us
Allari is a leading global professional ITaaS company primary focused on the IT Operations of Enterprise level IT Departments. 

Leadership
Our leaders have led Allari to continuous growth since the start of the company in 1999 and they continuously embody our corporate culture and company values. 

Locations
North America
Allari, Inc. (HQ)
9128 Strada Pl
Suite# 10115
Naples, FL 34108
Tel:  (866) 937-2224

South America
South America Allari del Ecuador S.A
Calle Acacias y Calle 7
Quevedo Los Rios 120302
Ecuador
Tel: 593-991-60383

Asia Pacific
Allari, Inc.
Dowlath Towers
Taylors Road
Kilpauk, Chennai 600010

A Video You May Like
Top 3 Ways To Prevent Downtime

1. Implement Preventive Maintenance Schedules

2. Execute Pre Business System Checks

3. Implement Measurements & Indicators

Implement Preventive Maintenance Schedules

Take care of your IT assets and they will take care of you. Implement a consistent, high quality preventive maintenance schedule. Let Allari do the chore based tasks while you focus on the important stuff!