Allowing employees to install software on company computing devices is a risk which needs to be managed. Risks include dependency conflicts which prevent programs from running, the introduction of malware and the use of unlicensed software.
To outline the requirements around installation software on company owned computing devices and to minimise the risk of loss of program functionality, the exposure of sensitive information contained within Infinity Works' computing network, the risk of introducing malware, and the legal exposure of running unlicensed software.
This policy applies to all Infinity Works employees, contractors, vendors and agents with an Infinity Works-owned device. This policy covers all computers, servers, smartphones, tablets and other computing devices operating within Infinity Works.
- Employees may install software on computing devices operated within the Infinity Works network in order to perform their role / function.
- All software must be appropriately licensed either by Infinity Works or by the user.
- All users must take every measure to ensure that they do not inject malware onto Infinity Works systems and networks.
- The Administration Team will obtain and track licenses owned by Infinity Works.
- Infinity Works computational devices may be audited at any time.
### Compliance Measurement
The ISMS Committee will verify compliance to this policy through various methods, including but not limited to, periodic walkthroughs, video monitoring, business tool reports, internal and external audits, and feedback to the policy owner.
Any exception to the policy must be approved by the ISMS Committee in advance.
An employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.
- Acceptable Usage Policy
- Software Asset Register
None