Policy Mobile Communication Device Please note this policy is mandatory and staff are required to adhere to the content Summary Access to mobile communication devices must be properly administered and controlled to provide a secure environment, effectively manage DECD resources, comply with legal and privacy requirements and conform to DECD conditions of connection Table 1 - Document details Publication date June 2011 Review date January 2014 Related legislation/applicable section of legislation Related policies, procedures, guidelines, standards, frameworks Replaces Policy officer (position) Manager, ICT Infrastructure & Asset Management Policy officer (phone) 8226 0911 Policy sponsor (position) Executive director responsible (position and office) Assistant Director, ICT Technical Services Executive Director, Infrastructure Applies to Key words Status Approved by Mobile Communication Device Approved Executive Director, Infrastructure Approval date June 2011 Version 1.5 1 Mobile Communication Device June 2011
Table 2 - Revision record Date Version Revision description 2 Mobile Communication Device June 2011
Table of Contents Policy... 1 Mobile Communication Device... Error! Bookmark not defined. 1. Title...4 2. Purpose...4 3. Scope...4 4. Policy detail...4 5. Roles and responsibilities...6 6. Monitoring, evaluation and review...6 7. Definitions and abbreviations...6 8. Supporting documents...6 9. References...6 Appendix...7 3 Mobile Communication Device June 2011
1. Title Mobile Communication Device 2. Purpose Access to mobile communication devices must be properly administered and controlled to provide a secure environment, effectively manage DECD resources, comply with legal and privacy requirements and conform to DECD conditions of connection. Mobile communication devices are defined as devices that can store, send and receive communications (voice, data and video) while the device is not physically attached to a network. Mobile communication devices include: Mobile telephones Tablet devices using wireless/mobile telecommunication technology (e.g. ipad, Android, Windows devices etc.) Smart phone devices Laptops/Notebooks with wireless/mobile telecommunication connectivity. Use and content of mobile communication devices must be in accordance with the ethical standards expected from DECD staff as outlined in the Code of Ethics for the South Australian Public Sector. 3. Scope This policy applies to all DECD staff. 4. Policy detail Provision of Mobile Communication Devices Mobile communication devices are only provided to DECD officers who have a demonstrated requirement as outlined in the DECD Procedure - Provision of Mobile Communication Devices. Only DECD approved and owned Mobile Communication Devices can be used. The list of approved devices can be found on in.decd and SSONet, under ICT Support. Primary Usage Mobile communication devices provided by DECD must be primarily used for DECD related business purposes only e.g. communications related to DECD business, authorised personal development and activities related to a person s duties. Usage, if subjected to public scrutiny, must not cause embarrassment or concern to DECD. Personal Usage 4 Mobile Communication Device June 2011
Non-business use of mobile communication devices is permitted consistent with the Code of Ethics for the South Australian Public Sector regarding reasonable use. All personal usage of mobile phone services must be reimbursed to DECD in accordance with the instructions received with mobile phone bills. Unacceptable Usage Usage that causes interference or disruption to other mobile communication device users will not be tolerated. Unacceptable usage includes, but is not limited to: distribution of offensive material use for personal financial gain propagation of any form of malicious software (viruses, worms etc) capture and storage of information that contravenes the State Government Information Privacy Principles. Security This policy should be read in conjunction with the DECD Policy ICT Security and the DECD Standard Mobile Communication Devices Security. Commercial Electronic Messages Consistent with the Spam Act, commercial electronic messages must: only be sent with the addressee s consent clearly identify who is responsible for sending the message; and allow people to opt-out from receiving future messages. Asset Management Management of mobile communication devices must be consistent with the DECD Policy - Corporate ICT Asset Management and the DECD Standard Mobile Communication Devices Security. Devices must be configured according to ICT Services standards. Non-compliance Violations of this policy, depending on severity and nature, may result in reprimand, loss of access to DECD mobile communication devices or dismissal. 5 Mobile Communication Device June 2011
5. Roles and responsibilities Table 2 - Roles and responsibilities Role Authority/responsibility for 6. Monitoring, evaluation and review 7. Definitions and abbreviations Table 3 - Definitions and abbreviations Term Meaning 8. Supporting documents The following whole-of-government and DECD policies and guidelines are relevant and should be read in conjunction with this policy. 6 Mobile Communication Device June 2011
Whole of Government Policies and Guidelines The State Government Information Privacy Principles (Cabinet Administrative Instruction 1/89) (governing the collection, release and publishing of information) Government Information Security Management Framework http://intra.sa.gov.au/policies/ismf/ismf.pdf The Code of Ethics for the South Australian Public Sector http://www.espi.sa.gov.au/files/codeofethicsfinal..pdf State and Commonwealth Acts The Commonwealth Spam Act 2003 (Governing the sending of commercial electronic messages) http://www.acma.gov.au/web/standard..pc/pc=pc _310294 DECD Policies and Guidelines DECD Policy ICT Security DECD Standard Mobile Communication Devices Security DECD Policy Corporate ICT Asset Management DECD Policy Corporate Electronic Mail Access and Use DECD ICT Acceptable Use Agreement DECD Procedure Provision of Mobile Communication Devices DECD Mobile Communication Devices User Agreement 9. References N/A Appendix N/A 7 Mobile Communication Device June 2011