To all new joiners and whoever are not aware of the important security guidelines. New points are highlighted in blue.
Dear All,
As CSC India supports number of global customers on 24x7 basis, continuous availability of network services and other key infrastructure is critical to our operations. These could be disrupted by incidents like virus/worm outbreaks or denial of service etc, leading to loss of customer's confidence and incurring additional costs in remediation efforts.
CSC India management would like to remind all staff that the following are NOT permitted according to CSC Security Policies:
Use of Peer-to-Peer (P2P) applications such as KaZaA, Skype, Morpheus, iMesh, BitTorrent, BearShare, FastTrack, open source and web-based P2P clients.
Furthermore, downloading / transferring of copyrighted material (e.g. music, videos and software) is illegal and is in violation of HR Policy (HRMP 223).
For employees awareness and to note, P2P software will enable a person to share files on his/her local PC over the Internet and thereby posing a very high security threat for our company information and Business. CSC has deployed protection services to detect such use.
Using Instant messengers like MSN, AIM, yahoo, IRC, skype and other web based clients in CSC network without Senior Management approval.
Usage of any of these softwares via public HTTPS proxies is not allowed at all. Only "Sametime" software is approved for use in CSC.
Installation of services and applications which are not defined in the CSC Standard Operating Environment (SOE) without approval.
All installations of non-SOE software are required to go through Service Delivery Internal team's (NMG) process and wherever required approval from higher management / exception approval from appropriate authority as required, has to be taken.
Such services includes Web, SMTP, Telnet, FTP and proxy server services etc which will cause security vulnerability in our network if used without proper hardening.
Disabling of the real-time scanner in the eTrust anti-virus (AV) application OR the eTrust application itself.
Ensure that the AV software is running all the time and has the latest signature version. If you're using VPN to connect to customer's network, the AV signature version needs to be checked prior to connecting.
Sending or forwarding of electronic mail messages to an extensive number of addresses or bigger groups is prohibited. Only selective approved list of users are allowed to send official communication to big groups abiding to the guidelines set for such communications.
Sharing the user login id and password with others.
Whenever employees work on the common PCs like Library PCs, meeting room PCs etc,they are advised to log off and close their session once their work is over without fail.
Opening the attachments/files received from unknown source. Please delete without opening them.
Using outside CDs/floppies/memory sticks in the CSC provided machines without approval and scanning for virus.
Sharing files/folders in the local machine for everyone full access.
This is a major vulnerability in the event of any virus outbreak. If shares are created, permission should be given only to the required users.
Employees carrying CSC provided laptops without company authorized yellow tags.
Also employees are required to show the yellow tags to security guards whenever required.
Bringing outside laptops to office and connecting to CSC network.Employees accompanying the visitors should ensure the same.
Usage of Wireless Internet access cards while being connected to CSC network using LAN.
Using a laptop or a desktop without BIOS boot password/Power on password enabled.
BIOS boot passwords are not to be shared with anyone. In case you do not have a boot password enabled on your Laptop/desktop, please raise a Service Desk request to get the same enabled ASAP.
Following are the DOs
Discussion of CSC as well as CSC customer's business on external as well as internal blog sites is strictly prohibited.
All the mobile devices used for CSC business purpose should be kept physically secured while users are away from those assets to avoid possible loss of the asset and CSC data. This should be followed while using the assets inside and outside the office.
Laptop users are required to use the cable locks provided to them to lock the same.
We require your full cooperation and compliance on this. Failure to comply with these guidelines would attract action as per the
HR policies.
For more Information on Global CSC security policies please visit the :
https://portal.amer.csc.com/wps/myportal/GlobalSecurity (Global Security Centre Website )