Microsoft Word - Auria Hourly Handbook December 2021 - FINA

H. INFORMATION SECURITY

Information is a valuable corporate asset. The preservation of its integrity, confidentiality, and availability is essential to the success of AURIA. Measures must be taken to protect information and information processing systems against unauthorized use, modification, disclosure and destruction, whether accidental or intentional. The method used to protect corporate information resources must be consistent with the value of those resources. The Information Security Policy states the requirements for protecting information resources at AURIA. The Information Security and the standards that it contains have been developed to control business risks and ensure that AURIA maintains its standard of excellence. The standards address the following information security concerns:

 User accountability including password guidelines  Electronic Mail

 Internet access and usage  Software licensing and use  Virus Protection  Laptop Security  Telecommunication  Data back up and recovery

Company policies prohibiting sexual or other harassment (race, national origin, religion, age, etc.) are applicable to the internet, e-mail, and voice-mail systems. Messages that contain off- color, inappropriate, or offensive language or depictions, whether textual or pictorial, or those containing racial or ethnic slurs, or sexual innuendo, are prohibited. Failure to comply may result in disciplinary action up to and including termination of employment or contractual relationships. The Company, at its discretion, may also pursue civil remedies or criminal prosecution. There is no privacy or expectation of privacy in the use of any corporate information systems or technologies. Users are prohibited from using programs or devices to bypass or disable any security measures anywhere on the network. In addition to the system hardware and software, all electronic files and electronic messages are the property of the Company, whether composed, received, or sent by the employee. E- mail messages and other electronic files are business records belonging to the Company. All e-mail and voice-mail messages are the property of the Company. Employees do not have any right to privacy with regard to use of any of the Company’s communications or information systems or technologies. They should not expect use of e-mail, telephone, and voice-mail systems, including messages, is private. In addition, employees should be aware that deleted messages and files may be retrieved and read by the Company. The Company has the right to retrieve, monitor, or review Internet use and any messages in the system and may disclose such use and messages for any purpose without notice to the employee and without seeking permission of the employee.

22