GuideManaged IT
IT policy essentials
By Inara Crest Engineering 1 min read
Acceptable use, passwords, devices, data handling and incident reporting — the short policies every organisation should have.
Policies set clear expectations for staff and give management a basis for decisions. They only work if they are short, readable and actually communicated.
1. Acceptable use
How company systems, email and internet may be used, and what is not allowed.
2. Passwords and authentication
Minimum requirements, use of a password manager, and multi-factor authentication for email and remote access.
3. Devices
Rules for company laptops and phones — encryption, updates, reporting loss — and whether personal devices may access company data, and on what terms.
4. Data handling
How information is classified, where it may be stored, how it may be shared, and how personal data is protected in line with the Data Protection Act, 2019.
5. Remote work
Expectations for working away from the office, including networks and screen privacy.
6. Incident reporting
What to report, how, and that reporting quickly will never be punished.
7. Review and acknowledgement
Review policies yearly and ask staff to acknowledge them.
See our managed IT services.
About the author
Inara Crest Engineering
Engineering team
Written by the Inara Crest Technologies engineering team, who design, install and support software, network, security, power and data centre systems for organisations in Kenya and East Africa.