17

Click here to load reader

Yammer Information Security Policy

  • Upload
    yammer

  • View
    356

  • Download
    2

Embed Size (px)

DESCRIPTION

Yammer's Full Information Security Policy Documentation

Citation preview

Page 1: Yammer Information Security Policy

!

!

!

!

!

!

!

!!

!

!

!

!

!

!"#$%&'()$"*+,-.%)(/*0$1)-/*!"#$%&'()(&

Page 2: Yammer Information Security Policy

"#$$%&'(!)*+,&$#-),*!(%./&)-0!1,2).0!)(!.%*-%&%3!,*!1&,-%.-)*4!-5%!.,*+)3%*-)#2)-06!

)*-%4&)-06!#*3!#7#)2#8)2)-0!,+!./(-,$%&'(!3#-#!.,22%.-%3!-5&,/45!-5%!"#$$%&!

#112).#-),*!#*3!-5&,/45!-5%!"#$$%&!9112).#-),*!:&,4&#$$%&'(!;*-%&+#.%!<9:;=>!?,!

#.5)%7%!-5)(!4,#2!-5)(!1,2).0!)$12%$%*-(!#!3%+%*(%@)*@3%1-5!(-&#-%40!,&4#*)A%3!)*-,!

BC!.,*-&,2!,8D%.-)7%(E!

!

B> F#)*-#)*!#!(%./&%!*%-G,&H!#&.5)-%.-/&%!-,!1&,-%.-!./(-,$%&!3#-#!

I> J*(/&%!(0(-%$(!-5#-!(-,&%!,&!1&,.%((!./(-,$%&!3#-#!#&%!1&,1%&20!.,*+)4/&%3!

#*3!#3%K/#-%20!5#&3%*%3!!

L> :&,-%.-!./(-,$%&!3#-#!3/&)*4!-&#*($)((),*!#.&,((!-5%!*%-G,&H!#*3!3/&)*4!

(-,&#4%!!

M> N%7%2,1!#*3!$#)*-#)*!(%./&%!(0(-%$(!!

O> N%7%2,1!#*3!$#)*-#)*!(%./&%!#112).#-),*(!!

P> Q(%!(-&,*4!#..%((!.,*-&,2!$%#(/&%(!!

R> S%(-&).-!150().#2!#..%((!-,!./(-,$%&!3#-#!!

T> ?&#.H!#*3!$,*)-,&!#22!#..%((!-,!./(-,$%&!3#-#!!

U> S%4/2#&20!-%(-!(%./&)-0!(0(-%$(!#*3!1&,.%((%(!!

BC> F#)*-#)*!(%./&)-0!1,2).)%(6!1&,.%3/&%(6!4/)3%2)*%(!#*3!(-#*3#&3(!-5#-!#33&%((!

)*+,&$#-),*!(%./&)-0!+,&!#22!%$12,0%%(6!.,*-&#.-,&(6!#*3!-5)&3!1#&-)%(!!

!

9((,.)#-%3!G)-5!%#.5!.,*-&,2!,8D%.-)7%!)(!#!(%-!,+!&%K/)&%$%*-(!-5#-!-,4%-5%&!

.,*(-)-/-%!"#$$%&'(!;*+,&$#-),*!V%./&)-0!:,2).0>!

!

;*!#33)-),*!-,!-5)(!1,2).0!#!(%&)%(!,+!(/11,&-)*4!(-#*3#&3(!#*3!1&,.%3/&%(!5#(!8%%*!

)$12%$%*-%3!-,!#33&%((!(1%.)+).!(%.-),*(!,+!-5)(!1,2).0!)*!4&%#-%&!3%-#)2>!9!2)(-!,+!-5%!

&%K/)&%3!(-#*3#&3(!#*3!1,2).0!3,./$%*-(!)(!3%-#)2%3!)*!911%*3)W!9>!

!

Page 3: Yammer Information Security Policy

!"#$%&'()$"*+,-.%)(/*0$1)-/*2,3.)%,&,"(4*

56*7')"(')"*'*4,-.%,*",(8$%9*'%-:)(,-(.%,*($*;%$(,-(*-.4($&,%*<'('*

!

B>B 922!;*-%&*%-!#..%(()82%!(%&7).%(!#&%!2,4).#220!(%1#&#-%3!80!#!(.&%%*%3!(/8*%-6!

H*,G*!#(!-5%!N%$)2)-#&)A%3!X,*%!<NFX=>!?5%!NFX!)(!-5%!,*20!(/8*%-!-5#-!.#*!

#..%1-!/*%(-#82)(5%3!)*8,/*3!-&#++).!+&,$!-5%!;*-%&*%->!

B>I 922!./(-,$%&!3#-#!<3#-#8#(%(6!2,4(6!-&#.%!+)2%(=!)(!(-,&%3!,*!#!(.&%%*%3!(/8*%-!

2,4).#220!(%1#&#-%3!8,-5!+&,$!-5%!NFX!#*3!4%*%&#2!)*-%&*#2!.,&1,&#-%!*%-G,&H>!

B>I>B!;*8,/*3!#*3!,/-8,/*3!-&#++).!+&,$!-5)(!(/8*%-!)(!&%(-&).-%3!-,!,*20!-5#-!

G5).5!)(!*%.%((#&0!+,&!-5%!#112).#-),*(!-5#-!#..%((!-5%!./(-,$%&!3#-#!(-,&%(>!

B>L Y)&%G#22!#*3!&,/-%&!.,*+)4/&#-),*!(-#*3#&3(!)*.2/3%E!

B>L>B!9!+,&$#2!1&,.%((!+,&!#11&,7)*4!#*3!-%(-)*4!#22!%W-%&*#2!*%-G,&H!

.,**%.-),*(!#*3!.5#*4%(!-,!-5%!+)&%G#22!.,*+)4/&#-),*>!

B>L>I!9!./&&%*-!*%-G,&H!3)#4&#$!)*.2/3)*4!#22!./(-,$%&!3#-#!(-,&%(>!

B>L>L!S%K/)&%$%*-(!+,&!#!+)&%G#22!#-!%#.5!;*-%&*%-!.,**%.-),*!#*3!8%-G%%*!

-5%!NFX!#*3!-5%!)*-%&*#2!*%-G,&H!#*3!+)2-%&)*4!#22!-&#++).!%*-%&)*4!#*3!%W)-)*4!

#*0!(/8*%-!-5#-!.,*-#)*(!#!./(-,$%&!3#-#!(-,&%>!

B>L>M!N%(.&)1-),*!,+!4&,/1(6!&,2%(6!#*3!&%(1,*()8)2)-)%(!+,&!$#*#4%$%*-!,+!

*%-G,&H)*4!%K/)1$%*->!

B>L>O!N,./$%*-%3!2)(-!,+!(%&7).%(!#*3!1,&-(!)*!/(%>!

B>L>P!Z/(-)+).#-),*!#*3!3,./$%*-#-),*!+,&!#22,G)*4!)*8,/*3!-&#++).!,*!#*0!

1&,-,.,2!,-5%&!-5#*![??:6!VV\]?\V6!VV[6!,&!^:_>!

B>L>R!V%./&)*4!#*3!8#.H/1!,+!&,/-%&!.,*+)4/&#-),*!+)2%(>!Y,&!%W#$12%6!&/**)*4!

.,*+)4/&#-),*!+)2%(!<+,&!*,&$#2!+/*.-),*)*4!&,/-%&(=6!#*3!(-#&-@/1!

.,*+)4/&#-),*!+)2%(!<G5%*!$#.5)*%(!#&%!&%@8,,-%3=!(5,/23!5#7%!-5%!(#$%!

(%./&%!.,*+)4/&#-),*>!

B>L>T!`/#&-%&20!&%7)%G!,+!+)&%G#22!#*3!&,/-%&!&/2%!(%-(>!

B>L>U!?&#++).!+)2-%&)*4!&/2%!(%-!(-#*3#&3(!+,&!8#(%2)*%!+)&%G#22!#*3!&,/-%&!

.,*+)4/&#-),*(!8#(%3!,*!V9_V!;*(-)-/-%!,&!a%*-%&!+,&!;*-%&*%-!V%./&)-0!<a;V=!

8%*.5$#&H(>!

B>L>U>B!Y)&%G#22!.,*+)4/&#-),*!)(!8#(%3!/1,*!#!b3%*0!#22c!&/2%6!G5).5!

(-#&-(!80!3%*0)*4!#22!)*8,/*3!-&#++).!#*3!,*20!#22,G)*4!-&#++).!-5#-!

$#-.5%(!#!*%-G,&H6!5,(-!,&!1&,-,.,2!-5#-!.,&&%(1,*3(!-,!#!2%4)-)$#-%!

8/()*%((!/(%>!

B>L>U>I!;*8,/*3!;*-%&*%-!-&#++).!)(!&%(-&).-%3!-,!;:!#33&%((%(!G)-5)*!-5%!

NFX>!

B>L>U>L!;*-%&*#2!,&!8,4,*!#33&%((%(!#&%!*,-!#22,G%3!-,!1#((!+&,$!-5%!

;*-%&*%-!)*-,!-5%!NFX>!

Page 4: Yammer Information Security Policy

B>L>U>M!;:!#33&%((!-&#*(2#-),*!<_9?!,&!:9?=!)(!)$12%$%*-%3!-,!1&%7%*-!

)*-%&*#2!#33&%((%(!+&,$!8&)*4!&%7%#2%3!,*!-5%!;*-%&*%->!;*-%&*#2!

(/8*%-(!(5,/23!/(%!SYa!BUBT!<1&)7#-%=!#33&%((!(1#.%(>!

B>M!922!G)&%2%((!*%-G,&H(!<d\9_(=!/(%!d:9I>!Y,&!-5,(%!d\9_(!/()*4!d:9I!)*!1&%@

(5#&%3!H%0!$,3%!-5%*!-5%!H%0!)(!&#*3,$20!4%*%&#-%3!#*3!.5#*4%3!K/#&-%&20!,&!

/1,*!-5%!-%&$)*#-),*!,+!#*0!%$12,0%%!G)-5!#..%((!-,!-5%!H%0>!

!

Page 5: Yammer Information Security Policy

=6*>"4.%,*4/4(,&4*(:'(*4($%,*$%*;%$-,44*-.4($&,%*<'('*'%,*;%$;,%1/*-$"#)?.%,<*

'"<*'<,3.'(,1/*:'%<,",<*

!

I>B!^%*3,&@(/112)%3!3%+#/2-(!+,&!(0(-%$!1#((G,&3(!#*3!,-5%&!(%./&)-0!1#&#$%-%&(!

#&%!*%7%&!/(%3>!

I>B>B!^%*3,&@(/112)%3!3%+#/2-(!#&%!.5#*4%3!*+,-#+!)*(-#22)*4!#!(0(-%$!,*!-5%!

*%-G,&H>!

I>I!;*3/(-&0!(-#*3#&3!.,*+)4/&#-),*!#*3!5#&3%*)*4!(-#*3#&3(!#&%!/(%3!+,&!#22!

(0(-%$(!(/.5!#(!-5,(%!+&,$!V9_V!;*(-)-/-%6!a%*-%&!+,&!;*-%&*%-!V%./&)-0!<a;V=6!,&!-5%!

_#-),*#2!;*(-)-/-%!,+!V-#*3#&3(!<_;V?=>!

I>L!922!&%$,-%!#3$)*)(-&#-)7%!#..%((!1&,-,.,2(!#&%!%*.&01-%3>!

I>L>B!VV[!)(!/(%3!+,&!&%$,-%!#3$)*)(-&#-),*!,+!\)*/W]Q*)W!(0(-%$(!#*3!

VV\]?\V!+,&!G%8@8#(%3!$#*#4%$%*-!.,*(,2%(>!S%$,-%!#3$)*)(-&#-),*!

1&,-,.,2(!,-5%&!-5#*!VV[!#*3!VV\]?\V!#&%!-/**%2%3!-5&,/45!#!^)&-/#2!:&)7#-%!

_%-G,&H!<^:_=>!?%2*%-6!Y?:6!^_a6!,&!V_F:7B!#&%!.+/+#!/(%3!+,&!&%$,-%!

#3$)*)(-&#-),*>!

I>M!9!5,(-@8#(%3!)*-&/(),*!3%-%.-),*!(0(-%$!<;NV=!)(!)*(-#22%3!#*3!$,*)-,&%3!,*!#22!

.,$1/-%&!(0(-%$(!-5#-!(-,&%!,&!-&#*($)-!./(-,$%&!3#-#>!

Page 6: Yammer Information Security Policy

@6*0%$(,-(*-.4($&,%*<'('*<.%)"?*(%'"4&)44)$"*'-%$44*(:,*",(8$%9*'"<*<.%)"?*

4($%'?,*

!

L>B!a/(-,$%&!1#((G,&3(!#&%!1&,-%.-%3!+&,$!.,$1&,$)(%>!

L>B>B!a/(-,$%&!1#((G,&3(!#&%!.+/+#!-&#*($)--%3!7)#!/*@(%./&%3!1&,-,.,2(>!

d%8@8#(%3!+,&$(!-5#-!#(H!+,&!1#((G,&3(!#&%!1&,-%.-%3!/()*4!VV\]?\V>!

L>B>I!:#((G,&3(!(-,&%3!)*!#!3#-#8#(%!,&!+)2%!#&%!&%*3%&%3!/*&%#3#82%!/()*4!#!

.&01-,4&#15).#220!(-&,*4!(#2-%3!5#(5!#24,&)-5$>!

L>B>L!93$)*)(-&#-,&(!*%7%&!#(H!#!/(%&!+,&!-5%)&!1#((G,&3!7)#!%$#)2!,&!,7%&!

-5%!15,*%>!

L>B>M!?G,@+#.-,&!#/-5%*-).#-),*!)(!/(%3!3/&)*4!#/-,$#-%3!1#((G,&3!

&%(%-]&%.,7%&0!1&,-,.,26!(/.5!#(!(%.&%-!K/%(-),*!#*3!%$#)2%3!-,H%*>!

L>I!a/(-,$%&!3#-#!)(!1&,-%.-%3!+&,$!3)(.2,(/&%!,&!.,&&/1-),*>!

L>I>B!a/(-,$%&!3#-#!)(!-&#*($)--%3!7)#!(%./&%3!1&,-,.,2(>!

L>I>B>B!d%8!8#(%3!#112).#-),*(!-5#-!.,22%.-!,&!3)(12#0!./(-,$%&'(!3#-#!

3,!*,-!#22,G!#..%((!7)#!/*@(%./&%3![??:!#*3!&%3)&%.-!#22![??:!

.,**%.-),*(!-,![??:V!<VV\]?\V=>!

L>I>B>I!9:;!#..%((!#2G#0(!,../&(!7)#![??:V>!

L>I>B>L!N#-#!8#.H/1(!#&%!8/2H!%*.&01-%3!/()*4!-5%!9JV!#24,&)-5$!

)$$%3)#-%20!/1,*!.&%#-),*>!

L>L!Y/220!3,./$%*-%3!H%0!$#*#4%$%*-!1&,.%((%(!#*3!1&,.%3/&%(!#&%!/(%3!+,&!

%*.&01-),*!H%0(>!

L>L>B!e%0(!#&%!4%*%&#-%3!/()*4!#!.&01-,4&#15).#220!(-&,*4!1(%/3,&#*3,$!

*/$8%&!4%*%&#-,&>!

! L>L>I!J*.&01-),*!H%0(!(5,/23!*%7%&!8%!-&#*($)--%3!7)#!/*(%./&%!1&,-,.,2(>!

L>L>L!J*.&01-),*!H%0(!#&%!(-,&%3!,*!5#&3%*%3!(0(-%$(!,/-()3%!,+!-5%!NFX>!

L>L>M!J*.&01-),*!H%0(!#&%!.5#*4%3!1%&),3).#2206!#-!2%#(-!#**/#220>!

L>L>M>B!:&,-,.,2(!-5#-!(/11,&-!#/-,$#-).!&%@H%0)*4!5#7%!)-!%*#82%3>!

!

Page 7: Yammer Information Security Policy

A6*B,C,1$;*'"<*&')"(')"*4,-.%,*4/4(,&4*

!

M>B!9*-)@7)&/(!(,+-G#&%!)(!3%12,0%3!,*!#22!(0(-%$(!.,$$,*20!#++%.-%3!80!G,&$(!#*3!

7)&/(%(6!%(1%.)#220!F).&,(,+-!d)*3,G(!(0(-%$(>!

M>B>B!9*-)@7)&/(!1&,4&#$(!#&%!.#1#82%!,+!3%-%.-)*46!&%$,7)*46!#*3!1&,-%.-)*4!

#4#)*(-!,-5%&!+,&$(!,+!$#2).),/(!(,+-G#&%6!)*.2/3)*4!(10G#&%!#*3!#3G#&%>!

M>B>I!922!#*-)@7)&/(!$%.5#*)($(!#&%!./&&%*-6!#.-)7%20!&/**)*46!#*3!.#1#82%!,+!

4%*%&#-)*4!#/3)-!2,4(>!

M>I!922!(0(-%$(!#*3!(,+-G#&%!5#7%!-5%!2#-%(-!7%*3,&!(/112)%3!(%./&)-0!1#-.5%(!

)*(-#22%3>!S%2%7#*-!(%./&)-0!1#-.5%(!#&%!)*(-#22%3!G)-5)*!,*%!$,*-5!,+!&%2%#(%>!

M>L!9!1&,.%((!-,!)3%*-)+0!*%G20!3)(.,7%&%3!(%./&)-0!7/2*%&#8)2)-)%(!<+,&!%W#$12%6!

(/8(.&)8%!-,!7/2*%&#8)2)-)%(!/13#-%(!+&,$!V%./&)-0!Y,./(!f/4!?&#.H%&!#*3!V%./*)#=!

#*3!/13#-%!(-#*3#&3(!-,!#33&%((!*%G!7/2*%&#8)2)-)%(!)(!%(-#82)(5%3>!

!

Page 8: Yammer Information Security Policy

D6*B,C,1$;*'"<*&')"(')"*4,-.%,*';;1)-'()$"4*

!

O>B!922!(,+-G#&%!#112).#-),*(!#&%!3%7%2,1%3!8#(%3!,*!(%./&%!.,3)*4!4/)3%2)*%(!(/.5!

#(!-5%!g1%*!d%8!9112).#-),*!V%./&)-0!:&,D%.-!<gd9V:=!4/)3%2)*%(>!

O>I!922!!(,+-G#&%!#112).#-),*(!#&%!3%7%2,1%3!8#(%3!,*!)*3/(-&0!8%(-!1&#.-).%(!#*3!

)*.,&1,&#-%!)*+,&$#-),*!(%./&)-0!-5&,/45,/-!-5%!3%7%2,1$%*-!2)+%.0.2%>!

! O>I>B!922!(0(-%$!#*3!(,+-G#&%!.5#*4%(!#&%!-%(-%3!8%+,&%!3%12,0$%*->!

O>I>I!V%1#&#-%!3%7%2,1$%*-6!-%(-6!#*3!1&,3/.-),*!%*7)&,*$%*-(!#&%!

$#)*-#)*%3>!

O>I>L!:&,3/.-),*!3#-#!)(!*%7%&!/(%3!+,&!-%(-)*4!,&!3%7%2,1$%*->!

O>I>M!922!-%(-!3#-#!#*3!#..,/*-(!#&%!&%$,7%3!8%+,&%!1&,3/.-),*!(0(-%$(!

8%.,$%!#.-)7%>!

O>I>O!922!-%$1,&#&0!#..,/*-(6!/(%&*#$%(6!#*3!1#((G,&3(!#&%!&%$,7%3!8%+,&%!

#*!#112).#-),*!)(!&%2%#(%3!-,!./(-,$%&(>!

O>L!V,/&.%!.,3%!)(!&%7)%G%3!#*3!#112).#-),*(!#&%!-%(-%3!1%&),3).#220!+,&!(%./&)-0!

7/2*%&#8)2)-)%(6!%(1%.)#220!-5,(%!&%2#-%3!-,E!

! O>L>B!Q*7#2)3#-%3!/(%&!)*1/-!<)*.2/3)*4!$#((!#--&)8/-%!#(()4*$%*-=!

! O>L>I!f&,H%*!#..%((!.,*-&,2!<+,&!%W#$12%6!$#2).),/(!/(%!,+!/(%&!;N(=!

O>L>L!f&,H%*!#/-5%*-).#-),*!#*3!(%((),*!$#*#4%$%*-!</(%!,+!#..,/*-!

.&%3%*-)#2(!#*3!(%((),*!.,,H)%(=!

O>L>M!a&,((@()-%!(.&)1-)*4!<hVV=!#--#.H(!

O>L>O!;*D%.-),*!+2#G(!<+,&!%W#$12%6!V`\!)*D%.-),*=!

O>L>P!a&,((@()-%!&%K/%(-!+,&4%&)%(!<aVSY=!

O>L>R!;$1&,1%&!%&&,&!5#*32)*4!

O>M!9112).#-),*(!-5#-!1&,.%((!./(-,$%&!3#-#!5#7%!2,G!2%7%2!2,4).#2!(%1#&#-),*!+)2-%&(!

-,!%*(/&%!-5#-!./(-,$%&!3#-#!G)22!*,-!8%!2%#H%3!-,!,-5%&!./(-,$%&(6!%7%*!)*!-5%!

%7%*-!,+!1&,4&#$$%&!%&&,&>!

!

Page 9: Yammer Information Security Policy

E6*F4,*4(%$"?*'--,44*-$"(%$1*&,'4.%,4*

!

P>B!9..%((!-,!(0(-%$(!.,*-#)*)*4!./(-,$%&!3#-#!)(!2)$)-%3!-,!,*20!-5,(%!)*3)7)3/#2(!

G5,(%!D,8!&%K/)&%!(/.5!#..%((>!

P>I!922!/(%&(!#&%!)3%*-)+)%3!G)-5!#!/*)K/%!/(%&!*#$%!8%+,&%!8%)*4!#22,G)*4!-,!#..%((!

(0(-%$(!.,*-#)*)*4!./(-,$%&!3#-#>!

! P>I>B!;*-%&#.-)7%!#..%((!-,!(0(-%$(!/()*4!#!(5#&%3!,&!4&,/1!2,4)*!)(!*,-!

#22,G%3>!

P>L!9..%((!-,!(0(-%$(!.,*-#)*)*4!./(-,$%&!3#-#!-5#-!3,%(!*,-!,&)4)*#-%!+&,$!-5%!

)*-%&*#2!.,&1,&#-%!*%-G,&H!)(!1&,5)8)-%3>!!

P>M!922!1#((G,&3(!#&%!%*.&01-%3!3/&)*4!-&#*($)((),*!#*3!(-,&#4%>!

P>O!9!2,4!,+!#22!#/-5%*-).#-),*!#--%$1-(!#4#)*(-!(0(-%$(!.,*-#)*)*4!./(-,$%&!3#-#!)(!

$#)*-#)*%3!#*3!$,*)-,&%3>!

P>P!Q(%&!#/-5%*-).#-),*!#*3!1#((G,&3!$#*#4%$%*-!1&,.%3/&%(!#&%!)$12%$%*-%3!

+,&!"00!(0(-%$(!G5).5!)*.2/3%(E!

P>P>B!a%*-&#2)A%3!.,*-&,2!,+!#33)-),*(6!3%2%-),*(6!#*3!$,3)+).#-),*(!,+!/(%&!

;N(!#*3!,-5%&!)*+,&$#-),*!

P>P>I!:&,.%3/&%(!+,&!7%&)+0)*4!/(%&!)3%*-)-0!8%+,&%!1%&+,&$)*4!1#((G,&3!

&%(%-(!

P>P>L!V%--)*4!+)&(-@-)$%!1#((G,&3(!-,!#!/*)K/%!7#2/%>!

P>P>M!;$$%3)#-%20!&%7,H)*4!#..%((!+,&!#*0!-%&$)*#-%3!/(%&(!

P>P>O!J(-#82)(5)*4!#*3!.,$$/*).#-)*4!#!1#((G,&3!1,2).0!-,!#22!/(%&(>!?5%!

1#((G,&3!1,2).0!)*.2/3%(E!

! P>P>O>B!N,!*,-!/(%!4&,/16!(5#&%36!,&!4%*%&).!#..,/*-(!#*3!1#((G,&3(!

P>P>O>I!:#((G,&3(!$/(-!8%!.5#*4%3!#-!2%#(-!%7%&0!UC!3#0(!

P>P>O>L!:#((G,&3(!$/(-!8%!#!$)*)$/$!,+!T!.5#&#.-%&(!

P>P>O>M!:#((G,&3(!$/(-!*,-!8%!3).-),*#&0!G,&3(6!*#$%(6!,&!12#.%(!

P>P>O>O!:#((G,&3(!$/(-!.,*-#)*!8,-5!*/$%&).!#*3!#215#8%-).!

.5#&#.-%&(!

P>P>O>P!:#((G,&3(!(5,/23!.+/+#!8%!&%7%#2%3!-,!".1-.+!<)*.2/3)*4!

#3$)*)(-&#-,&(=!

!

Page 10: Yammer Information Security Policy

G6*2,4(%)-(*;:/4)-'1*'--,44*($*-.4($&,%*<'('*

!

R>B!Y#.)2)-0!%*-&0!.,*-&,2(!#&%!)*!/(%!-,!2)$)-!#*3!$,*)-,&!150().#2!#..%((!-,!(0(-%$(!

-5#-!(-,&%6!1&,.%((6!,&!-&#*($)-!./(-,$%&!3#-#>!

R>B>B!a#$%&#(!#&%!/(%3!-,!$,*)-,&!(%*()-)7%!#&%#(>!^)3%,!)(!(-,&%3!+,&!#-!2%#(-!

-5&%%!$,*-5(>!

R>I!922!7)()-,&(!#&%!5#*32%3!#(!+,22,G(E!

R>L>B!9/-5,&)A%3!8%+,&%!%*-%&)*4!#&%#(!G)-5!150().#2!.,**%.-),*(!-,!-5%!

*%-G,&H>!

R>L>I!922!7)()-,&(!$/(-!8%!%(.,&-%3!#-!#22!-)$%(!80!#!"#$$%&!%$12,0%%>!

R>L!9!7)()-,&!2,4!)(!/(%3!-,!$#)*-#)*!#!150().#2!#/3)-!-&#)2!,+!7)()-,&!#.-)7)-0>!?5)(!2,4!

)(!&%-#)*%3!+,&!#!$)*)$/$!,+!-5&%%!$,*-5(>!

R>M!f#.H@/1(!#&%!(-,&%3!)*!#!(%./&%6!,++@()-%!2,.#-),*!

! R>M>B!922!,++@()-%!8#.H/1!3#-#!)(!%*.&01-%3!/()*4!9JV>!

R>M>I!922!8#.H/1!$%3)#!#&%!1&,1%&20!)*7%*-,&)%3>!

R>O!922!1#1%&!#*3!%2%.-&,*).!$%3)#!-5#-!.,*-#)*!./(-,$%&!3#-#!#&%!150().#220!

(%./&%3>!

R>P!F%3)#!.,*-#)*)*4!./(-,$%&!3#-#!)(!3%(-&,0%3!G5%*!)-!)(!*,!2,*4%&!*%%3%3!+,&!

8/()*%((!,&!2%4#2!&%#(,*(!#(!+,22,G(E!

! R>R>B![#&3.,10!$#-%&)#2(!#&%!.&,((@./-!(5&%3>!

R>R>I!J2%.-&,*).!$%3)#!)(!1/&4%36!3%4#/((%36!,&!(5&%33%3!(,!-5#-!./(-,$%&!

3#-#!.#**,-!8%!&%.,*(-&/.-%3>!

!

Page 11: Yammer Information Security Policy

H6*I%'-9*'"<*&$")($%*'11*'--,44*($*-.4($&,%*<'('*

!

T>B!9/-,$#-%3!#/3)-!-&#)2(!#&%!)$12%$%*-%3!)*!,&3%&!-,!&%.,*(-&/.-!-5%!+,22,G)*4!

%7%*-(E!

! T>B>B!922!#.-),*(!-#H%*!80!#*0!)*3)7)3/#2!G)-5!&,,-!1&)7)2%4%(!

! T>B>I!9..%((!-,!#*0!#/3)-!2,4(!

! T>B>L!;*7#2)3!2,4).#2!#..%((!#--%$1-(!

T>I!?5%!+,22,G)*4!#/3)-!-&#)2!%*-&)%(!#&%!&%.,&3%3!+,&!#22!.&)-).#2!(0(-%$(E!

! T>I>B!Q(%&!)3%*-)+).#-),*!

! T>I>I!?01%!,+!%7%*-!

! T>I>L!N#-%!#*3!-)$%!

! T>I>M!V/..%((!,&!+#)2/&%!)*3).#-),*!

! T>I>O!g&)4)*#-),*!,+!%7%*-!

! T>I>P!;3%*-)-0!,&!*#$%!,+!#++%.-%3!3#-#6!(0(-%$!,&!&%(,/&.%!

T>L!922!.&)-).#2!(0(-%$!.2,.H(!#*3!-)$%(!#&%!(0*.5&,*)A%3!/()*4!#!$#(-%&!-)$%!(,/&.%>!

T>M!922!#/3)-!-&#)2(!#&%!(-,&%3!(%./&%20>!

! T>M>B!^)%G)*4!,+!#/3)-!-&#)2(!)(!2)$)-%3!-,!-5,(%!G)-5!#!D,8@&%2#-%3!*%%3>!

! T>M>I!9/3)-!-&#)2(!#&%!1&,-%.-%3!+&,$!/*#/-5,&)A%3!$,3)+).#-),*(>!

T>M>L!Y)2%!)*-%4&)-0!$,*)-,&)*4!#*3!.5#*4%!3%-%.-),*!(,+-G#&%!)(!)*!/(%!,*!

2,4(!-,!%*(/&%!-5#-!2,4!3#-#!.#**,-!8%!.5#*4%3!G)-5,/-!4%*%&#-)*4!#2%&-(!

<#2-5,/45!*%G!3#-#!8%)*4!#33%3!(5,/23!*,-!.#/(%!#*!#2%&-=>!

T>O!\,4(!+,&!#22!.&)-).#2!(0(-%$(!#&%!&%7)%G%3!#-!2%#(-!3#)20>!

T>P!9/3)-!-&#)2!5)(-,&0!)(!&%-#)*%3!+,&!#-!2%#(-!,*%!0%#&6!G)-5!#!$)*)$/$!,+!-5&%%!

$,*-5(!,*2)*%!#7#)2#8)2)-0>!

!

Page 12: Yammer Information Security Policy

J6*2,?.1'%1/*(,4(*4,-.%)(/*4/4(,&4*'"<*;%$-,44,4*

!

U>B!922!(%./&)-0!.,*-&,2(!#&%!-%(-%3!#-!2%#(-!#**/#220!-,!#((/&%!-5%!#8)2)-0!-,!

#3%K/#-%20!)3%*-)+0!#*3!-,!(-,1!#*0!/*#/-5,&)A%3!#..%((!#--%$1-(>!

U>I!_%-G,&H!7/2*%&#8)2)-0!(.#*(!#&%!&/*!#-!2%#(-!K/#&-%&20!#*3!#+-%&!#*0!()4*)+).#*-!

*%-G,&H!.5#*4%>!

U>L!9!L&3!1#&-0!.,$1#*0!)(!%*4#4%3!,*!#*!,*4,)*4!8#()(!-,!1%&+,&$!1%*%-&#-),*!

-%(-)*4!#-!2%#(-!,*.%!#!0%#&!,&!#+-%&!#*0!()4*)+).#*-!*%-G,&H!.5#*4%>!!

U>M!Y)2%!)*-%4&)-0!$,*)-,&)*4!(,+-G#&%!)(!3%12,0%3!-,!#2%&-!1%&(,**%2!-,!

/*#/-5,&)A%3!$,3)+).#-),*!,+!.&)-).#2!(0(-%$!,&!.,*-%*-!+)2%(>!

!

Page 13: Yammer Information Security Policy

5K6*7')"(')"*4,-.%)(/*;$1)-),4L*;%$-,<.%,4L*?.)<,1)",4*'"<*4('"<'%<4*(:'(*

'<<%,44*)"#$%&'()$"*4,-.%)(/*#$%*'11*,&;1$/,,4L*-$"(%'-($%4L*'"<*(:)%<*;'%(),4*

!

BC>B!g1%&#-),*#2!(%./&)-0!1&,.%3/&%(!5#7%!8%%*!3%7%2,1%3!-5#-!#&%!.,*()(-%*-!G)-5!

-5%!&%K/)&%$%*-(!)*!-5)(!1,2).0>!

BC>I!922!%$12,0%%(!#&%!$#3%!#G#&%!,+!-5%!(%*()-)7)-0!,+!3#-#!#*3!-5%)&!&%(1,*()8)2)-0!

+,&!1&,-%.-)*4!)->!

BC>I>B!?5)(!3,./$%*-!#*3!#22!(/11,&-)*4!1&,.%3/&%(6!4/)3%2)*%(!,&!(-#*3#&3(!

3,./$%*-(!#&%!$#3%!#7#)2#82%!-,!#22!%$12,0%%(>!

BC>I>I!922!%$12,0%%(!#&%!&%K/)&%3!-,!#.H*,G2%34%!)*!G&)-)*4!-5#-!-5%0!5#7%!

&%#3!#*3!/*3%&(-,,3!-5%!.,$1#*0'(!(%./&)-0!1,2).)%(!#*3!1&,.%3/&%(>!

BC>I>L!V%./&)-0!#G#&%*%((!-&#)*)*4!)(!1%&+,&$%3!-,!%$12,0%%(!/1,*!5)&%!#*3!

#-!2%#(-!#**/#220>!

BC>L!9*!)*3)7)3/#2!,&!#!-%#$!5#(!8%%*!#(()4*%3!-5%!+,22,G)*4!(%./&)-0!

&%(1,*()8)2)-)%(E!

! BC>L>B!J(-#82)(56!3,./$%*-6!#*3!3)(-&)8/-%!(%./&)-0!1,2).)%(!#*3!1&,.%3/&%(>!

BC>L>I!F,*)-,&!#*3!#*#20A%!(%./&)-0!#2%&-(!#*3!)*+,&$#-),*6!#*3!3)(-&)8/-%!-,!

#11&,1&)#-%!1%&(,**%2>!

BC>L>L!J(-#82)(56!3,./$%*-6!#*3!3)(-&)8/-%!(%./&)-0!)*.)3%*-!&%(1,*(%!#*3!

%(.#2#-),*!1&,.%3/&%(!-,!%*(/&%!-)$%20!#*3!%++%.-)7%!5#*32)*4!,+!()-/#-),*(>!

BC>L>M!93$)*)(-%&!/(%&!#..,/*-(6!)*.2/3)*4!#33)-),*(6!3%2%-),*(6!#*3!

$,3)+).#-),*(>!

BC>L>O!F,*)-,&!#*3!.,*-&,2!#22!#..%((!-,!./(-,$%&!3#-#>!

BC>M!:,-%*-)#2!%$12,0%%(!#&%!(.&%%*%3!-,!$)*)$)A%!#--#.H(!+&,$!)*-%&*#2!(,/&.%(>!

933)-),*#2!8#.H4&,/*3!#*3!.&)$)*#2!.5%.H(!#&%!.,*3/.-%3!#4#)*(-!1,-%*-)#2!

%$12,0%%(!-5#-!G)22!8%!4&#*-%3!#..%((!-,!./(-,$%&!3#-#>!

BC>O!?5)&3@1#&-0!(%&7).%!1&,7)3%&(6!(/.5!#(!.,@2,.#-),*!+#.)2)-)%(!#*3!;*-%&*%-!(%&7).%!

1&,7)3%&(6!#&%!&%K/)&%3!5#7%!3,./$%*-%3!(%./&)-0!.,*-&,2(!-5#-!$%%-!,&!%W.%%3!-5%!

&%K/)&%$%*-(!)*!-5)(!1,2).0>!

BC>P!9*!)*.)3%*-!&%(1,*(%!12#*!5#(!8%%*!)$12%$%*-%3!-,!8%!%*#.-%3!)*!-5%!%7%*-!,+!

#!(0(-%$!.,$1&,$)(%!,&!(/(1%.-%3!(0(-%$!.,$1&,$)(%>!!

BC>P>B!;*.)3%*-!&%(1,*(%!-%#$!5#(!8%%*!%(-#82)(5%3!#*3!)(!1&%1#&%3!-,!

&%(1,*3!)$$%3)#-%20!-,!#!(0(-%$!8%#.5>!9-!2%#(-!,*%!-%#$!$%$8%&!)(!

#7#)2#82%!,*!#!IM]R]LPO!8#()(!-,!&%(1,*3!-,!#2%&-(>!!

BC>P>I!;*.)3%*-!&%(1,*(%!12#*!#33&%((%(!-%#$!$%$8%&'(!&,2%(!#*3!

&%(1,*()8)2)-)%(6!(1%.)+).!)*3%.%*-!&%(1,*(%!1&,.%3/&%(6!8/()*%((!&%.,7%&0!

#*3!.,*-)*/)-0!1&,.%3/&%(6!3#-#!8#.H/1!1&,.%((%(!#*3!.,$$/*).#-),*!#*3!

.,*-#.-!(-&#-%4)%(!+,&!./(-,$%&(!%++%.-%3!80!-5%!8&%#.5>!

Page 14: Yammer Information Security Policy

Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.

Signed,

____________________________________

N#7)3!V#.H(6!aJg!

Page 15: Yammer Information Security Policy

233+.456&27&

+.;;$%()"?*+('"<'%<4*'"<*0%$-,<.%,4*

!

;*!#33)-),*!-,!-5%!"#$$%&!V%./&)-0!:,2).0!-5%!+,22,G)*4!(-#*3#&3(!#*3!1&,.%3/&%(!

3,./$%*-(!5#7%!8%%*!3%7%2,1%3!-,!)$12%$%*-!(1%.)+).!#(1%.-(!,+!-5%!(%./&)-0!

1,2).0>!

!

• Y)&%G#226!&,/-%&6!#*3!(%&7%&!.,*+)4/&#-),*!(-#*3#&3(!

o !"#$%&'()$"*+,-.%)(/*0$1)-/*+,-()$"2*345*6*747*

!

• a5#*4%!.,*-&,2!1&,.%3/&%(!+,&!.&)-).#2!(%&7%&(!

o !"#$%&'()$"*+,-.%)(/*0$1)-/*+,-()$"*748*

!

• J*.&01-),*!H%0!$#*#4%$%*-!1&,.%3/&%(!

o !"#$%&'()$"*+,-.%)(/*0$1)-/*+,-()$"*545*

*

• _%-G,&H!/(%&!1#((G,&3!1,2).0!

o !"#$%&'()$"*+,-.%)(/*0$1)-/*+,-()$"*94948*

!

• Q(%&!#/-5%*-).#-),*!#*3!1#((G,&3!$#*#4%$%*-!1&,.%3/&%(!

o !"#$%&'()$"*+,-.%)(/*0$1)-/*+,-()$"*949*

!

• ;*.)3%*-!&%(1,*(%!12#*!

o !"#$%&'()$"*+,-.%)(/*0$1)-/*+,-()$"*3:49*

!

Page 16: Yammer Information Security Policy

233+.456&87&

M,(8$%9*+,?&,"('()$"*01'"*

!

?5%!#&.5)-%.-/&%!,+!-5%!*%-G,&H!)(!3%()4*%3!-,!(/11,&-!-5%!1&,-%.-),*!,+!./(-,$%&!

3#-#>!?,!+#.)2)-#-%!-5)(!1&,-%.-),*6!-5%!*%-G,&H!5#(!8%%*!8%!(%4$%*-%3!)*-,!L!

(.&%%*%3@(/8*%-(6!G5).5!#&%!2,4).#220!(%1#&#-%3!80!+)&%G#22(>!?5%!+/*3#$%*-#2!

1/&1,(%!,+!(%4$%*-)*4!-5%!*%-G,&H!)(!-G,!+,23>!Y)&(-6!-,!(%1#&#-%!(%&7%&(!-5#-!#..%1-!

)*8,/*3!.,**%.-),*(!+&,$!-5%!;*-%&*%-!(,!-5#-!-5)(!#..%((!.#*!8%!(-&).-20!.,*-&,22%3>!

?5)(!-%.5*)K/%!)(!.,$$,*20!H*,G*!#(!.&%#-)*4!#!N%$)2)-#&)A%3!X,*%!,&!NFX>!?5%!

(%.,*3!4,#2!)(!-,!2,4).#220!(%1#&#-%!(%&7%&(!-5#-!(-,&%!./(-,$%&!3#-#!+&,$!#*0!,-5%&!

(%&7%&(!-5#-!.,**%.-!3)&%.-20!-,!-5%!;*-%&*%->!

!

?5)(!b3%+%*(%@)*@3%1-5c!(-&#-%40!#++,&3(!#33)-),*#2!1&,-%.-),*!,+!./(-,$%&!3#-#!%7%*!

)*!-5%!%7%*-!-5#-!#*!%W-%&*#2!#--#.H%&!.,$1&,$)(%(!#*!#112).#-),*!(%&7%&!,&!

%$12,0%%!G,&H(-#-),*>!

!

B7N*

922!1/82).20!#..%(()82%!;*-%&*%-!(%&7).%(!#&%!2,.#-%3!,*!(%&7%&(!G)-5)*!-5%!NFX>!

?&#++).!+&,$!(%&7%&(!G)-5)*!-5%!NFX!3%(-)*%3!+,&!#*!)*-%&*#2!&%(,/&.%!/(%!-5%!

1&)7#-%!;:!#33&%((!#(!-5%!(,/&.%!#33&%((!(,!-5#-!)*-%&*#2!+)&%G#22(!.#*!)3%*-)+0!)-!#(!

)*-%&*#2!-&#++).>!

!

NFX!V%&7%&(!#&%!3/#2!5,$%3!#*3!5#7%!8,-5!#!1/82).!;:!#33&%((!#*3!#!1&)7#-%!<SYa!

BUBT=!#33&%((>!

O.4($&,%*B'('*+($%,*+.P",(*

V%&7%&(!-5#-!(-,&%!./(-,$%&!3#-#6!(/.5!#(!3#-#8#(%(6!2,4(!-5#-!.,*-#)*!./(-,$%&!3#-#6!

#*3!8#.H/1!+)2%(6!#&%!2,.#-%3!,*!#!(%1#&#-%!(.&%%*%3!(/8*%->!?5)(!(/8*%-!,*20!#22,G(!

-&#++).!-5#-!$#-.5%(!-5%!1&,+)2%!,+!#*!#112).#-),*!#11&,7%3!-,!#..%((!./(-,$%&!3#-#>!

!

?5%!a/(-,$%&!N#-#!V-,&%!V/8*%-!/(%(!#*!SYa!BUBT!1&)7#-%!#33&%((!(1#.%>!

!

O$%;$%'(,*QRM*

922!%$12,0%%!G,&H(-#-),*(!#*3!)*-%&*#2!(%&7%&(!#&%!2,.#-%3!,*!-5%!.,&1,&#-%!\9_>!!

!

?5%!.,&1,&#-%!\9_!/(%(!#*!SYa!BUBT!1&)7#-%!#33&%((!(1#.%>!

!

Page 17: Yammer Information Security Policy

M,(8$%9*R%-:)(,-(.%,*

!

*

S'4,1)",*T)%,8'11*2.1,4*

R)*U*B7N*!"?%,44*

• N%*0!-&#++).!*,-!#33&%((%3!-,!-5%!1/82).!;:!#33&%((!,+!#*!#.-)7%!(%&7%&!G)-5)*!-5%!NFX!

• N%*0!-&#++).!-,!#!3%(-)*#-),*!1,&-!,-5%&!-5#*!#11&,7%3!-5,(%!,+!#11&,7%3!;*-%&*%-!(%&7).%(!

(/.5!#(![??:6![??:V6!#*3!^:_!

R,*U*B7N*>?%,44*

• N%*0!#22!-&#++).!%W.%1-!%(-#82)(5%3!)*8,/*3!.,**%.-),*(!

S)*U*O.4($&,%*B'('*+($%,*!"?%,44*

• N%*0!#22!-&#++).!+&,$!1/82).!(,/&.%!;:!#33&%((%(!

• g*20!#22,G!-&#++).!G)-5!#!1&)7#-%!(,/&.%!;:!#33&%((!#*3!3%(-)*#-),*!1,&-!-5#-!$#-.5!-5%!

1&,+)2%!,+!#*!#112).#-),*!#11&,7%3!-,!#..%((!-5%!./(-,$%&!3#-#!(-,&%!

S,*U*O.4($&,%*B'('*+($%,*>?%,44*

• N%*0!#22!-&#++).!%W.%1-!%(-#82)(5%3!)*8,/*3!.,**%.-),*(!

O)*U*O$%;$%'(,*QRM*!"?%,44*

• N%*0!#22!-&#++).!%W.%1-!%(-#82)(5%3!,/-8,/*3!.,**%.-),*(!

O,*U*O$%;$%'(,*QRM*>?%,44*

• 922,G!#22!-&#++).!-5#-!3,%(!*,-!.,*+2).-!G)-5!;*-%&*%-!#..%1-#82%!/(%!1,2).0!

!