IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
Mobile phones should not be left around unprotected on third-party premises
such as hotel rooms. All password protection mechanisms should be enabled
now if this has not already been done. Locking the phone up in a cabinet will
discourage casual thieves.
Cost information
Every year GSM phone calls become cheaper, but there are certain options
which in the long run can incur high charges. As charging structures are
changed frequently, users should be informed at regular intervals as to how
much the various types of connection cost and how these are affected by the
time of the call, as well as the cost of other options.
When mobile phones are used, receiving a call itself can cost money if the
person being called is abroad, for example, or has activated call forwarding to
the landline network. As the caller has no means of knowing where the person
he is calling is, the forwarding costs are not charged to him.
Rules regarding contactability
Even when people have a mobile phone there are times when they either
cannot or would not wish to be called. Thus it can create a bad impression if
mobile phones are used at every opportunity. If possible, mobile phones
should be switched off during meetings or presentations. As a minimum, the
ringing tone should be disabled or be set so that it is barely noticeable.
Whenever it will not be possible to talk freely (e.g. during meetings, in
restaurants etc) use of the mobile phone should be avoided from the outset.
On the other hand, steps should be taken to ensure that the user can be
contacted. Various options are available for ensuring this. For example,
- times when users are to be contactable can be specified;
- the answerphone function can be used;
- or the phone can be configured so that calls are diverted to a secretary.
Banning the use of mobile phones
Consideration should be given as to whether the use or even the carrying of
mobile phones should be restricted in all or certain areas of the
company/agency. For example, this could be a good idea for meeting rooms
(see also S 5.80 Protection against bugging of indoor conversations using
mobile phones). If the IT security policy of the institution does not allow
mobile phones to be brought into the building, clear notices to this effect must
be placed on all the entrances. Checks should then be made at regular intervals
to ensure that the policy is being adhered to.
The use of mobile phones can sometimes have an adverse effect on the proper
functioning of other technical devices. This is why mobile phones have to be
switched off, for example, in aircraft or intensive care wards. Mobile phones
can also exercise interference on other, sensitive IT systems. For example,
such interference has been observed in server rooms and computer centres.
The lower the transmitting power of the mobile phone or the further away that
the mobile phone is from any sensitive equipment, the less likely it is to cause
interference.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000
Do not place mobile
phone on servers!