Smartphone and Tablet

quarterceladonΚινητά – Ασύρματες Τεχνολογίες

10 Δεκ 2013 (πριν από 3 χρόνια και 5 μήνες)

54 εμφανίσεις


P
olicy

Information Communications Technology


Department of

Corporate and Information Services

S
martphone and

T
ablet


January 2013

Version

2.2



P
olicy

Information Communications Technology


Department of

Corporate and Information Services

Document details

Document Title

Smartphone and Tablet Policy

Contact details

Information Communication Technology (ICT) Policy and Strategy Division,
Department of Corporate and Information Services (DCIS) Northern
Territory Government (NTG).

File name

It_ict_smartphone_and_tablet_policy

Version

2.2

Date issued

January 2013

Approved by

NTG CIO Forum: 27 October 2011


Change History

Version

Date

Author

Change details

0.3

1 October 2011

B. Chilcott / K.
McCarthy

Initial draft

2.0

20 October 2011

B. Chilcott

Updates to policy statement, section
2.1 on
ownership.

2.1

27 October 2011

B. Chilcott

Endorsed by NTG CIO Forum

2.2

14 January 2013

K. McCarthy

Internet version and update
government names.


Table of Contents

Department of

Corporate and Information Services

1

Policy Statement

................................
................................
................................
......

4

1.1

Overview

................................
................................
................................
........

4

1.2

Aim

................................
................................
................................
.................

4

1.3

Scope

................................
................................
................................
.............

4

1.4

Responsibility

................................
................................
................................
.

4

1.5

Ownership and Responsibility of Content

................................
.......................

5

1.6

Other related documents

................................
................................
................

5

2

Definition

................................
................................
................................
..................

6

2.1

Ownership

................................
................................
................................
......

6

2.2

Types of OS
and allowable devices

................................
................................

6

3

Drivers,
risks and benefits

................................
................................
......................

8

3.1

Drivers

................................
................................
................................
............

8

3.2

Risks

................................
................................
................................
..............

8

3.3

Benefits

................................
................................
................................
..........

9


Information Communication Technology

Smartphone and
Tablet


Department of

Corporate and Information Services

4

1

Policy
Statement

Northern Territory Government (NTG) employees (including contractors) may connect
some smartphones and tablet devices to th
e NTG Information Communication
Technology (ICT) infrastructure if and only if employees implement the security
requirements.

Android, iOS (Apple), Blackberry and Symbian devices may be connected to the NTG
network. Windows Phone 7 must not be connected to

the NTG network due to lack of
native encryption.

These security requirements apply to privately and government owned devices.

NTG employees are personally responsible for maintaining the security and
maintenance of these devices. Support is currently not

provided under NTG ICT
contracts.

1.1

Overview

There has been an increase in the availability of cheaper smartphones
and tablets
with
many
of the
functionalities of a laptop. The phones
and tablets
are now much easier to
use, very portable, and have improved
security features. Since the phones
and tablets
have become cheaper, private ownership of t
hese devices are

much more prevalent.

There is a concern that there will be loss of corporate information and breach of privacy
if security features are not suitabl
y enabled in the devices.
This is due to an increased
risk of these

devices
being lost,

stolen or otherwise disposed of carelessly
therefore
exposing corporate information to outsiders.

1.2

Aim

The primary goal of this policy is to protect the information and
services on these
devices from unauthorised access.

The document provides policy

and

security controls for devices accessing NTG
information and systems.
The policy
also
covers privately owned devices that have
been accessing NTG systems with or without au
thorisation. The standards for device
configuration will greatly reduce the risks of access to NTG information should the
devices be lost or stolen.

1.3

Scope

The policy principally covers the use of smartphones and tablets that have access to
NTG information and systems. The policy applies to both devices supplied
through

NTG contracts and privately owned devices.

1.4

Responsibility

The Information Communication Te
chnology (ICT) Policy and Strategy Division of the
Department of
Corporate and Information Services

(D
CIS
) is responsible for
developing and maintaining ICT policies and guidelines for use across the NTG.

All NTG Chief Executives (CE) are responsible for e
nsuring all aspects of this policy
are applied within their agency.

This

policy applies to all NTG users
, including
NTG
employees and related
organisations, contractors, service providers, and other persons using systems
connected to the
NTG

network

or acc
ess NTG information
.

Information Communication Technology

Smartphone and
Tablet


Department of

Corporate and Information Services

5

Failure to comply with the instructions in this policy will attract various inappropriate use
provisions of the End User ICT Services policy.

Agencies may impose further requirements and restrictions on employee use of
smartphones and
tablet devices.

1.5

Ownership

and Responsibility of Content

If the device is owned by NTG, all content belongs to NTG unless the user has paid for
an application with their personal funds. If the device is privately owned, all personal
content belongs to the u
ser and all NTG business related content is owned by NTG.

There is no service agreement or outsourcing contract that manages the content stored
on smartphones or tablets. Therefore it is the users’ responsibility to backup the device.

1.6

Other
related

docum
ents

1.

End User ICT Services Policy

2.

Security Guidelines for Overseas Travel

3.

Records Management Standards for Public Sector Organisations in the NT

4.

Records Management Advice # 10

5.

Cloud Computing Policy

A copy of the above documents can be obtained from the NT
G Enterprise Architecture
and Security Unit (details in Section 1.7).

Information Communication Technology

Smartphone and
Tablet


Department of

Corporate and Information Services

6

2

Definition

Smartphones

are mobile telephones that are designed to provide users telephony
services, internet access and application services. These services include but are not
limited
to: digital voice calling; video calling; text messaging; email; web browsing; still
and video cameras; MP3 players;

and access to content ecosystems including
applications, books, movies and music
. Smartphone O
perating
S
ystems (OS)

are
now
generally
desig
ned
with

small touchscreens as the user interface.

Tablets

are general purpose computers that have a single panel with a touch screen
as the main input device. These devices are designed to provide users with internet
access and the use of software applic
ations.

2.1

Ownership

For the purpose of this policy, ownership of the device, phone number (SIM) and
content is irrelevant.

Where NTG information is stored on the device, all of the requirements of this policy
must be adhered to.

2.2

Types

of OS and allowable d
evices

There are several brands of smartphones and tablets (hardware) that are currently
available. However, there are o
nly six m
ajor OS that are used for mobile technology

The following table identifies which devices may be connected to the NTG subject to

the requirements in this policy

Type

Description

Android

Android an open source OS maintained by Google and the
Open Handset Alliance (http://
www.openhandsetalliance.com
).

Examples of smartphones that use the Android OS are: HTC;
Samsung; Motorola; and T
-
Mobile. Examples of tablets that
run Android OS are: Asus; Samsung; Motorola; LG; Acer; HTC;
and Viewsonic. Android owners download applications via the
Android Market onlin
e store (
https://market.android.com/
).

Can be connected

Apple iOS

iOSis a MAC OS specialised for mobile devices. It was
originally developed for the iPhone but is now used foriPad,
iPod Touch and Apple TV technologies. Apple apps are
available at iTunes
(
http://www.apple.com/au/itunes/
) or the
App Store (
http://www.apple.com/iphone/apps
-
for
-
iphone/
).

Can be connected

Blackberry

Blackberry is an OS maintained by Research In Motion, Ltd
(RIM) for its range of blackberry smartphones and the
blackberry Play
book. Blackberry applications can be
downloaded at Blackberry App World
(
http://appworld.blackberry.com/webstore/
).

Can be connected

Symbian

Was originally an open source OS maintained by Nokia. This
OS has now become a shared source model maintained by
Accenture, as Nokia have announced that a Windows OS will
Information Communication Technology

Smartphone and
Tablet


Department of

Corporate and Information Services

7

Type

Description

be used in all future Nokia products. Users must ensure native
encryption is activate
d.

Can be connected

WebOS

Palm introduced WebOS is the successor of PalmOS and was
later acquired by HP. The WebOS platform is used in HP
smartphones and the HP TouchPad.

Can not be connected (This product is discontinued)

Windows 7

The latest Windows OS for smartphones is Windows Phone 7.
Examples of smartphones that use the Windows OS are:
Nokia; HTC; Samsung; LG; and T
-
Mobile. Examples of tablets
using Windows OS are: Dell, Asus; Lenovo; Samsung and
Viliv.

Can not be connected (Thi
s product is discontinued)

Other

All other operating systems.

Can not be connected

Information Communication Technology

Smartphone and
Tablet


Department of

Corporate and Information Services

8

3

Drivers,
risks and benefits

The drivers, risks and benefits of smartphone and tablet technology for the NTG are as
follows:

3.1

Drivers

As NTG employees become more mobile, they are demanding access to the same
level of application functionality and connectivity as their office computer. Smartphones
and tablets are able to fulfil their demands as they have recently recreated mobile
technol
ogy with the ability to utilize real time communications, private networks and
web browsing within one mobile device.

Some of the key drivers for agencies to adopt mobile technology include:

Driver

Outcome

Improved technology




Alway猠捯c湥捴敤
;



E慳a t漠o

;



I
mpr潶敤 獥捵rity 獥ttin杳
;



䱥慶攠污灴潰p慴 t桥 offic攮

V慬略 f潲 M潮ey




Aff潲摡扬e t散e湯logy;



I湣牥慳敤 灲潤p捴ivity 潶orri摥猠捯獴 of sm慲t灨o湥 潲
t慢l整e



R敤畣u猠l慰t潰 or PC 畳攮

N慴楯湡l Br潡摢慮搠
N整e潲o Pr潪散t



I湣牥慳敤 i湴nr湥t 扡湤wi摴栠
thr潵g桯畴 t桥 NT.


3.2

Risks

Mobile OS platforms are rapidly evolving, continually creating new capabilities and
features. This in turn creates new issues in regards to security and management of
these devices.

Some key risks related to smartphones and table
ts include:

Risk

Description

Physical



Hig桬y 灯rt慢l攠t桥ref潲o 灲潮p to l潳猠or t桥ft
;



D敶i捥⁩猠摥捯浭i獳s潮敤 扵t 獴ill 桡猠N呇 摡ta 獴or敤
潮 it;



U獥牳sm慹 獨sre t桥ir d敶i捥猠c漠family 潲ofri敮d献

S散erity



䱡捫cof 獥捵rity 獯ftw慲攠t桥refor攠扥eng
attack敤 潲
i湦散t敤 批 m慬w慲攠摥liv敲敤e慣牯獳 t桥 Int敲湥t
捯c湥捴i潮;



A扩lity t漠批灡獳s獥捵rity m散e慮isms;



C潮湥捴i湧 摥vi捥猠co u湳n捵牥cWi
-
䙩 湥tw潲os;



C潮fi摥nti慬 摡t愠獴or敤 潮 摥vi捥猠c桡t 慲a 湯t
敮捲y灴敤p

Information Communication Technology

Smartphone and
Tablet


Department of

Corporate and Information Services

9

Risk

Description



Bl略t潯t栠慮h Wir敬敳e c潮ti湵慬ly o


N整e潲o



N整e潲o r敳e畲捥c敲汯慤 l敡摩湧 to 湥tw潲k
畮慶慩l慢ility for t桥 敮d 畳ur;



P敲獯湡e 摥vi捥猠慣捥獳i湧 t桥 N呇T湥tw潲欠wit桯畴u
慵t桯riz慴楯渮

3.3

Benefits

Smartphones and tablets have the ability to improve work outcomes for the following
reaso
ns:

Benefit

Description

Increased
Efficiency



E慳a t漠畮摥rst慮d 慮搠畳u;



A扩lity t漠慣捥獳sinform慴i潮 慮祷桥re
;



R敤畣u 捹捬攠eime 批 桡vi湧 t桥 慢ility to 慰灲潶攠
灲潣敳獥p mor攠q畩ckly;



S異灯rt 扥tt敲 摥捩獩潮 maki湧 潮 t桥 g漮

I湣牥慳敤
Pr潤畣瑩uity



Wor欠rem潴敬y;



Ty灥 Mi湵t敳⁷桩l攠楮 m敥ti湧;



R敳e潮搠do 敭慩l猠慷慹afr潭 t桥 offi捥c

䙬數e扩lity



S異灯rt fl數i扬攠w潲oing 慧r敥m敮t献