it virus protection policy procedures

Upload: carmen-dumitru

Post on 03-Jun-2018

215 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/12/2019 IT Virus Protection Policy Procedures

    1/5

  • 8/12/2019 IT Virus Protection Policy Procedures

    2/5

    /.1

    -uthorised 0oftware 0ee the DDC Coputer 0oftware Policy.

    /.!

    Coputer Virus - coputer virus is a progra or piece of code that is loaded ontoany coputer including PCs and servers without the "nowledge of the owner andruns against the owner2s wishes. -ll coputer viruses are anade. -ll coputerviruses will disrupt the operation of the infected coputer. 0oe coputer virusesare destructive peranently daaging data files or progras on a coputer.

    User "#areness

    3.1

    -ll users will be reuired to sign the following stateent before being allowed accessto DDC coputers4networ"s

    I have read the Councils Virus Protection Policy and fully understand the terms and

    conditions and agree to abide by them.

    I understand that the Councils security systems will record for management use all virusprotection activity on DDC computers/networks.

    I understand that violation of this policy may lead to disciplinary action includingtermination of employment and could also lead to personal criminal prosecution.

    Responsi$ilities o Users

    5.

    1.6

    7very 7ployee2s ,esponsibility.

    5.1.1

    7ach eployee is personally responsible for understanding and observing theprovisions of this policy.

    5.1

    .!

    t is contrary to DDC policy for any eployee to introduce deliberately a virus intoDDC coputers and4or networ"s to withhold inforation necessary for the effectiveipleentation of virus protection procedures or to use software or data that has not

    been properly scanned for viruses in DDC coputers and4or networ"s.

    5.!.6

    T Departent*s ,esponsibility.

    5.!.

    1

    The T Departent is responsible for overseeing coputer virus protection activitieswithin DDC.

    5.

    The T Departent will evaluate recoend and aintain virus protection softwareand4or tools for use on DDC des"top coputers and networ" servers. The T

    2

  • 8/12/2019 IT Virus Protection Policy Procedures

    3/5

    !.!

    Departent will provide support for the evaluation acuisition and aintenance ofvirus protection software and4or tools for other systes aintained within DDC. TheT Departent will ensure that virus protection software is installed on any des"topcoputer and networ" server acuired by DDC before they are ade available foruse by DDC its eployees or its agents.

    5.!.%

    The T Departent will investigate every report of an apparent coputer virusinfection and will a"e every reasonable effort to deterine the source of theinfection. The T Departent will "eep all affected personnel advised of theinvestigation.

    5.!.

    &

    For each incident The T Departent will develop and4or provide step$by$stepprocedures for the scanning and actual reoval of the virus.

    5.!./

    The T Departent will oversee the effort to reove the virus fro the affectedcoputer to scan for viruses on any other coputers that were connected to thiscoputer and to scan any dis"ettes that were used in the coputer(s).

    Virus Protection Procedures

    8.1

    .6

    9eneral 9uidance

    8.1.1

    -ll data and4or progra files ust be scanned for viruses before installation (or inthe case of software distributed in copressed for iediately after installation) tosafeguard DDC networ"s fro infection. This includes shrin"$wrapped software (i.e.software shipped in taper$proof pac"aging) procured directly fro coercialsources such as :icrosoft ;ovell etc. t also includes shareware and freewareobtained fro electronic bulletin boards or on dis" (dis"ette or CD$,

  • 8/12/2019 IT Virus Protection Policy Procedures

    4/5

    8.1

    ./

    Virus protection software shall be loaded on each des"top coputer and server as aterinate and stay resident (T0,) progra to constantly onitor for viruses toprevent introduction to the networ".

    8.!

    Virus ,eporting and Docuentation by 7ployee.

    8.!.1

    ?hen an eployee detects what appears to be a virus the eployee shall ta"e thefollowing steps

    a) ?rite down the nae of the virus if provided by the virus detection software.

    b) ?rite down any recent unusual syste activities (for instance une#pected dis"access error essages or screen displays) and if possible include when these

    activities were first noticed.

    ediately

    c) ;otify the T Departent

    d) f the coputer that ay be infected is part of a networ" disconnect thecoputer fro the networ".

    e) Post a warning note on the infected coputer.

    8.

    %

    Virus ,eport +andling by the T Departent.

    8.%.1

    >pon receipt of a notice of a possible virus clarify syptos verify if there is a virusdeterine the source of the infection isolate the source fro the DDC environentand assess the daage.

    8.%.!

    Verify that all potentially affected users have been notified.

    8.%.%

    f it is a new virus and4or the aount of daage is significant wor" with the user(s)to isolate the virus and develop a course of action (step$by$step procedures) forrestoring the networ" and4or coputer(s) to noral.

    8.%.&

    ,eove the virus fro the affected coputer scan for viruses on any othercoputers that were connected to this coputer and scan any dis"ettes that wereused in the coputer(s).

    %acup and Restore@.

    The T Departent is responsible for the bac"up of all file server progras and data.-ll storage devices ust be scanned for viruses before bac"up.

    4

  • 8/12/2019 IT Virus Protection Policy Procedures

    5/5

    E'ceptions

    16.

    -ny e#ceptions to this Virus Protection Policy shall reuire prior written approval ofthe Director of Corporate 0ervices.

    (urt)er Inor!ation

    11.

    f you would li"e further inforation on the contents of this Virus Protection Policy oron any atters relating to it please contact the Council*s T -dvisor.

    I at any sta*e t)ere are any issues #it)in t)e policy #)ic) are percei+ed $y any partyas conlictin* #it) t)eir ri*)ts, t)at party s)ould $rin* t)ese to t)e attention o t)e

    Director o Corporate Ser+ices or raise a *rie+ance t)rou*) t)e -rie+ance Procedure.:ay !66%

    5