BITS Induction Manual_Final

must display a reasonable level of
physical security measures. Users
are expected to secure their
handhelds and related devices,
irrespective of whether the computing
device(s) is in active use or not.
- Any computing devise(s) that is
configured to access the Mahindra
Finance?s IT assets via wireless or wired
connectivity adhere to the authentication
requirements as specified by the BITS.
- In addition to this, all hardware security
configurations on Mahindra Finance
owned or hired computing device(s),
secure platform and software must be
approved by the BITS before it is installed
on the device.
- Personal computing devices used for
accessing confidential corporate
information should be safeguarded
against theft/misuse/loss. Loss/theft
should be duly reported to IT risk
committee through CISO. Employee
should ensure erasure of data upon exit
to ensure confidentially and integrity of
Mahindra Finance?s information.
Don't s
- User should not modify, install or
uninstall application, software or
updating patches by their own. Users
shall not modify any configurations
including OS, network access,
administration rights etc.
- Password or other confidential
information should not be stored on
computing device(s) or their associated
storage device (such as SD and CF cards
as well as memory sticks and related
flash based supplementary storage
media)
- Users shall not make any notifications to
Mahindra finance owned / hired
computing device(s) and installed
hardware or software. This includes but
not limited to installation of software,
connection of sync cables and cradles
and use of Mahindra finance-owned
wireless/wired network via these devices.
Wireless Usage Don't s
- Wireless access to internet is restricted by
corporate policy. Therefore the user
should not modify the
configuration/setting of the wireless
devices/data cards.