PRIVATE AND CONFIDENTIAL

Attachment – Policies, Procedures and Standards

1. Acceptable Use Policy for Communications and Technology (ICT) Systems
   1. The purpose of these policies are to ensure that all use of the Customer’s Information, Communications and Technology (ICT) systems is legal, ethical and consistent with the aims, values and objectives of the Customer.
   2. The Customer’s Systems are not to be used for inappropriate activities for example, pornography, fraud, defamation, breach of copyright, unlawful discrimination or vilification, sexual harassment, stalking, illegal activity and privacy violations.
   3. Non-compliance of the ICT Security policy may put the confidentiality, integrity and availability of Customer’s ICT services and systems at risk. All Customer personnel should be aware of the Customer’s ICT Security policy and their obligations.
2. Security Policies
   1. Security Policies – Copyright Infringement Policy
   2. Security Policies – Data Classification
   3. Security Policies – Data Loss Prevention
   4. Security Policies – Device Encryption
   5. Security Policies – Email Security
   6. Security Policies – Guest Wireless Network
   7. Security Policies – Identity and Access Management
   8. Security Policies – Password Policy and Guidelines
   9. Security Policies – Privacy of the Network
   10. Security Policies – Requirements for Securing Information Systems
   11. Security Policies – Responsible Use of Information Technology Resources
   12. Security Policies – Restricting Network Access for Insecure Systems
   13. Security Policies – Security and Privacy Incident Response Plan
   14. Security Policies – Use of Email
   15. Security Policies – Web Proxy
3. Condidential Data Policies
   1. Confidential Data Policies – PCI Policy
   2. Confidential Data Policies – Administrative Security
   3. Confidential Data Policies – Authentication and Authorization
   4. Confidential Data Policies – Physical Security
   5. Confidential Data Policies – Integrity Policy