How Do You Create a Fair Laptop Policy for Engineers Working from Home?

Dear All,

Ours is an Engineering R&D center, and we have laptops in our office. Sometimes, our Engineers take these laptops to their homes to do official work during weekends and holidays. My management has asked me to formulate a policy regulating the use of laptops.

I kindly request any esteemed members of this forum to provide suggestions and a format that can be used to draft a policy in this regard. You can email me at yunusahamed@yahoo.co.in.

Thanks & Regards,
S. Yunus Ahamed

Formulate an Information Security Policy and then conduct a small training for all, highlighting good practices and non-conformances. Do not proceed with bits of policies in isolation; for example, today you start with emails, tomorrow internet, and next comes cell phones. Analyze business risks, mitigation plans, and then proceed. There are 127 controls in ISO-27001 (Information Security Management Systems), so let me know if you need further help.

Suryavrat

Dear Mr. Yunus,

Firstly, prepare a note that every employee has to sign whenever he/she takes the laptop home. Add the same as a clause. Prepare a do's and don'ts list and send it to all, informing them about the various ISO Clauses. Virus updates should be handled by the IT team as per SOP.

Any movement of a laptop outside the premises should be communicated to Admin for data updates.

Thanks,
Siddharth