Bring Your Own Device Policy
Purpose
This policy outlines the rules and regulations for using personally-owned devices for work-related purposes at Cadence OneFive. The policy aims to protect the security and integrity of the company’s data and technology infrastructure while allowing employees the flexibility to use their own devices.
Scope
This policy applies to all employees, contractors, and temporary staff who use their personal devices to access company networks, systems, or data.
Policy Statement
Cadence OneFive recognizes that employees may prefer to use their own devices for work-related tasks. The company allows this practice under the following conditions:
Device Registration
Employees must register their personal devices with the IT department before using them for work purposes. The IT department will maintain a list of approved devices and their owners.
Security Requirements
Operating System Updates
Employees are required to apply all available operating system patches on at least a weekly basis. Automatic updates should be enabled.
Antivirus Software
Employees must set up and run antivirus software on their personal devices used for work. Cadence OneFive will purchase antivirus software for the employee if necessary. Antivirus software must be kept up-to-date at all times.
Device Security
Devices must be password-protected with a strong, unique password. Devices must be configured to lock automatically after a maximum of 5 minutes of inactivity. Where available, employees must enable two-factor authentication for accessing company resources.
Data Protection
Company data must not be stored on personal devices unless absolutely necessary and approved by management. If company data is stored on a personal device, it must be encrypted. Employees must use company-approved cloud storage solutions for storing and sharing work-related files.
Lost or Stolen Devices
Employees must immediately report lost or stolen devices to the IT department.
Acceptable Use
Personal devices used for work purposes are subject to the company’s Acceptable Use Policy. Employees must not use personal devices for work purposes in a manner that violates any company policies or applicable laws.
Support and Maintenance
The IT department will provide limited support for personal devices used for work purposes. Employees are responsible for backing up their personal data and maintaining their devices.
Separation from Company
Upon termination of employment, employees must allow the IT department to remove all company data from their personal devices.
Policy Compliance
Failure to comply with this policy may result in disciplinary action, up to and including termination of employment.
Policy Review
This policy will be reviewed annually and updated as necessary to reflect changes in technology, business needs, or regulatory requirements.