7/23/2019 BYOD Policy Template

http://slidepdf.com/reader/full/byod-policy-template 1/2

 YourOrg

Smartphone Policies template

 The use of a smartphone in connection with YourOrg’s business is a privilege granted toemployees through approval of their management. YourOrg reserves the right to revoke theseprivileges in the event that users do not abide by the policies and procedures set out below.

 The following policies are aimed to protect the integrity of YourOrg data and ensure it remainssafe and secure under YourOrg control. Please note that there may be limited exceptions tothese policies owing to device limitations between vendors.

References to the word device! below includes" but is not limited to" #ndroid" $lack$erry"iPhone" iPad" tablet" %indows mobile or other smartphones.

&sers of Personal 'martphones must agree to all terms and conditions in this policy to beallowed access to those YourOrg services.

[The policies below are easily adopted because they require only behaviouralcompliance by users]

( )rrespective of security precautions mentioned here" you are expected to use your device inan ethical manner and in accordance with YourOrg )T #cceptable &se Policy( Your device must lock itself with a P)* +personal identi,cation number set by you-( )f left idle" your device must automatically activate its P)* after a maximum timeout periodof / minutes( )n the event of loss or theft of your device" you must inform YourOrg within 0 working days

[The policies below are typical of applications only, and could be re-written to reectthose applications. To enforce these on an actual device/smartphone would requiresome negotiation of permissions]

( Your device will lock your account after / failed login attempts( Your device or application will lock every / minutes" re1uiring reentry of your password( Your device will include password rotation every 23 days up to a maximum of 0 passwords( The password must be a minimum of 4 characters( The password must contain at least one letter or number +except on devices that cannotaccept alphanumeric passwords-( The password must not be one of your previous 5 passwords

[The policies below usually applied where devices are issued to sta! by thecompany" are not so easily implemented because they require technicalcon#guration. There may be issues of ownership $omputer %isuse &ct '(()" whichdo not normally arise where devices are company-owned]

( Your device may be remotely wiped if6 +i- you lose the device7 +ii- you terminate employmentwith YourOrg7 +iii- the )T section detects a data or policy breach or virus7 or +iv- if you incorrectlytype your password 83 consecutive times.( Your device may allow for only the remote wipe of YourOrg data. This means your personal data is still vulnerable" and thus it is recommended you also set adevice password and take additional security precautions.

 Tampering

&sing your device in ways not designed or intended by the manufacturer is not allowed. This

7/23/2019 BYOD Policy Template

http://slidepdf.com/reader/full/byod-policy-template 2/2

includes" but is not limited to" 9:ailbreaking’ or 9rooting’ your smartphone.

;iability

# personal smartphone can be connected to the YourOrg infrastructure or services" but the useris personally liable for their device and carrier service costs. &sers of personal smartphones arenot eligible +except by prior agreement- for reimbursement of expenses for hardware or carrier

services. #ccess

<mployees that purchase a device on their own that is not in line with our standard approveddevice lists may not be able to or allowed to have their devices added to our servers. =)t ishighly recommended that the employee refer to YourOrg )T support to review approveddevices. &sers of personal smartphones are not permitted to connect to YourOrg infrastructurewithout documented consent from YourOrg )T support. >urthermore" YourOrg reserves the rightto disable or disconnect some or all services without prior noti,cation.

?isclaimer

 YourOrg hereby acknowledge that the use of a personal smartphone in connection with YourOrgbusiness carries speci,c risks for which you" as the user" assume full liability. These risksinclude" but are not limited to" the partial or complete loss of data as a result of a crash of theoperating system" errors" bugs" viruses" downloaded malware" and@or other software orhardware failures" or programming errors which could render a device inoperable.