Definitions
Virtual Private Networking
“VPN” (Virtual Private Network) is the configuration of a secure encrypted communication channel or tunnel through a public network such as the Internet.
Directive
Users who need remote access must have management approval to connect to the company’s IT facilities from an offsite location.
Users with the capability to connect remotely to GNB Information Security Directive’s IT facilities:
- must follow the security guidance supplied by IT Technical Support regarding who has access to their computing devices, configuration of their remote connection software, and maintenance of their operating system
- must not use non-company email accounts, such as Hotmail, Yahoo or AOL to conduct company business
- must observe the same restrictions regarding the use of company facilities and resources while connected remotely as are defined in all User Responsibilities policies for onsite use
- must not disable or circumvent any company-imposed security measures such as antivirus software or idle activity limits and associated automated action
- must maintain their remote systems with all available security patches in a timely manner
- must maintain up-to-date antivirus definitions and software
- may only enable wireless connection capability on a network-connected client computer or laptop with the written consent of IT Technical Support
- must not divulge to an unauthorized individual the remote configuration parameters that enable their remote connection to GNB Information Security Directive’s IT facilities
Purpose
The purpose of this directive is to ensure that:
- users with approved remote access capability have secure means to access GNB Information Security Directive’s information systems
- company systems, networks, and data are adequately protected against security threats from computer systems managed outside GNB Information Security Directive’s premises and control
- only authorized users with appropriate training regarding safe remote access procedures may connect to company systems and networks via remote connections
