CYBERSECURITY POLICY

 

• Intent and Scope

 

 

This cybersecurity policy(policy) provides the basis of cybersecurity management within

 

Homey Connect.

 

This policy applies to all of Homey Connect employees, contractors, volunteers, vendors and anyone else who may have any type of access to Homey Connect systems, software and hardware.

 

Effective protection of business information creates a competitive advantage, both in the ability to preserve the reputation of Homey Connect and in reducing the risk of the occurrence of negative events and incidents.

 

 

• Password Requirements

 

 

To avoid employees' work account passwords being compromised, these best practices are advised for setting up passwords:

 

1. Use at least 8 characters (must contain capital and lower-case letters, numbers and symbols)

 

1. Do not write down password and leave it unprotected

 

1. Do not exchange credentials when not requested or approved by supervisor

 

1. Change passwords every (3) months

 

• Email Security

 

 

Emails can contain malicious content and malware. In order to reduce harm, employees should employ the following strategies:

 

1. Do not open attachments or click any links where content is not well explained

 

1. Check the email addresses and names of senders.

 

1. Search for inconsistencies

 

1. Block junk, spam and scam emails

 

1. Avoid emails that contain common scam subject lines such as prizes, products and money transfers

 

If an employee is not sure that an email, or any type of data is safe, the employee should contact 1300 046 693.

 

 

• Device Security and Using Personal Devices

 

 

Logging in to any work accounts for personal devices such as mobile phones, tablets or laptops, can put Homey Connect data at risk. Homey Connect does not recommend accessing any Homey Connect data from personal devices. However, if this cannot be avoided, employees are obligated to keep their devices in a safe place and not exposed to anyone else.

 

Employees are recommended to follow these best practice steps:

 

1. Keep all electronic devices' passwords secure and protected

 

1. Logging into accounts should only be performed through safe networks

 

1. Install security updates on a regular basis

 

1. Upgrade antivirus software on a regular basis

 

1. Never leave devices unprotected and exposed

 

1. Lock computers when leaving the desk

 

• Transferring Data

 

 

Data transfer is a common cause of cybercrime. Employees should follow these best practices when transferring data:

 

1. Avoid transferring personal information such as customer data and employee information

 

1. Adhere to the relevant personal information legislation

 

1. Data should only be shared over authorised networks

 

1. If applicable, destroy any sensitive data when it is no longer needed

 

• Working Remotely

 

 

When working remotely, all the cybersecurity policies and procedures must be followed.

 

• Acceptable Use

 

 

User accounts on work systems are only to be used for the business purposes of Homey Connect and not to be used for personal activities.

 

Employees are responsible for protecting all confidential information used and/or stored on their accounts. This includes their user logins and passwords. Employees are prohibited from making unauthorised copies of such confidential information and/or distributing it to unauthorised persons outside of Homey Connect.

 

Employees must not purposely engage in any activity with the intent to: harass other users; degrade the performance of the system; divert system resources to their own use; or gain access to Homey Connect systems for which they do not have authorisation.

 

 

• Security Requirements

 

 

Employees must not install unauthorised software.The company may at any time introduce a whitelist of approved/trusted programs. If this occurs then only these programs may be used by employees.

 

Employees should perform daily backups of important new/changed data, software and configuration settings.

 

Employees must not use unauthorised devices on their workstations unless they have received specific authorisation from Aaron Cluff and Marco Di Benedetto.

 

Employees must not attempt to turn off or circumvent any security measures.

 

Employees must report any security breaches, suspicious activities or issues that may cause a cyber security breach to Aaron Cluff and Marco Di Benedetto.

 

 

• Disciplinary Action

 

 

If this policy is breached, one or more of the following disciplinary actions will take place:

 

1. Incidents will be assessed on a case-by-case basis

 

1. In case of breaches that are intentional or repeated or cases that cause direct harm to Homey Connect, employees may face serious disciplinary action

 

1. Subject to the gravity of the breach, formal warnings may be issued to the offending employee.