Laserfiche WebLink
Appendix C <br />Metro-INET Acceptable Use Policy Version 3.0 1/1/2024 <br />Audience <br />This policy applies to any person using Metro-INET information systems and Metro-INET affiliate (hereon <br />referred to as "agency") equipment. Including, and not limited to, all employees, appointed and elected <br />officials, contractors, and volunteers. <br />Overview <br />This policy serves to protect the security and integrity of Metro-INET's electronic information systems by <br />educating employees about appropriate and safe use of available technology resources. This policy is <br />meant to provide a minimum -security baseline and supersedes any less restrictive policy. <br />Metro-INET reserves the right to inspect, without notice, all data, emails, files, settings, or any other <br />aspect of an agency computer or related system, including personal information created or maintained by <br />an employee as determined by the Metro-INET Information Security Manager or agency designated <br />representative. <br />Beyond this policy, Metro-INET may distribute information regarding precautions and actions needed to <br />protect Metro-INET systems; all employees are responsible for reading and following the guidance and <br />directives in these communications. <br />Requests for exceptions to this policy can be submitted to Metro-INET and by completing the Metro-INET <br />Risk and Treatment Acceptance form. <br />Identities <br />Account owners are responsible for the accounts assigned to them and for the actions taken with <br />those accounts. <br />Accounts must not be shared without prior authorization from Metro-INET, except for calendars <br />and related calendaring functions. <br />Accounts require a Metro-INET Acceptable Use Policy review and acknowledgement and must <br />meet the Metro-INET Access and Identity standard. Accounts may automatically expire after <br />specific timeframes at the discretion of the Metro-INET Information Security Manager. <br />2. Passwords <br />Passwords shall never be shared. If it is necessary to access an employee's computer or files, <br />contact your supervisor to review or request assistance from Metro-INET. Metro-INET will not <br />provide access to accounts without the approval of the Metro-INET Information Security Manager. <br />Passwords shall not be stored in any location on or near the computer or stored electronically <br />such as in a cell phone or other mobile device other than an encrypted password manager <br />solution. (Example: Microsoft Authenticator App) <br />Employees are responsible for maintaining computer/network passwords and must adhere to the <br />Metro-INET Identity and Access Standards. Metro-INET Identity and Access Standards may be <br />updated at the discretion of the Metro-INET Information Security Manager. <br />Page 52 of 60 <br />