Staff Device Usage and Guidelines

Introduction
To protect company data and systems, staff must follow these key device usage policies.

 1. Device Access Policies 

• Do not use personal laptops to access any business data (e.g. documents, email etc). 
• Personal device mobile phone / tablet is permitted for business collaboration purposes only, such as accessing Microsoft Teams and email.
• If you are currently in possession of a business old laptop , please bring it to the IT department so we can ensure all software and security update are fully up to date. 

2. Working in Public Locations 

• When working in public location ( e.g. , hotel , café, airport, or trains ), whether you’re connected to a secure or unsecured Wi-Fi network , always ensure the corporate VPN is enabled for secured protection. Failure to enable the VPN greatly increases your exposure to cyber risk.

3. VPN Usage 

• Ensure FortiClient VPN is enabled on your work device whenever you’re working remotely. This ensures secure protection for all WNA network traffic and provides access to shared drives for seamless collaboration.Failure to do so may result in limited access to network resources.

4. eSIM

• Staff travelling outside the UK and EU , will be provided with an eSIM to ensure continued data connectivity. Please remember to submit a request in advance of your trip.

5. Password Security 

• Users will  now have the ability to create strong , unique passwords. To support this , training sessions on the Password Manager will be provided , allowing users to securely store their credentials.Further updates will follow shortly
  
• Please note that password complexity requirements have been implemented . To sucessfully change or reset your password, it must meet the follwing criteria. 
  • Be 10-12 characters in length
  • Include a mix of uppercase and lowercase letters 
  • Contain at least one number
  • Include at least one special character or symbol
    

6. 90 Day Password Policy 

• A 90-day password renewal policy will be implemented, with further updates to follow shortly.

 7. Email Safety Measures 

• If you receive an email flagged as coming from a High-Risk Sender Location, report it to the IT department immediately for investigation .
  
• If the email is confirmed as legitimate, a release can be requested and the domain will be whitelisted to prevent future quarantines.
• Do not interact with emails from suspicious or unfamiliar domains , please forward them to IT department  immediately for investigation.