UCL INSTITUTE OF NEUROLOGY COMPUTER POLICY Policy Title: Filename: Created: Updates: Status: Use and Authentication of Laptops F:\pol-and-proc-overviews\laptops.doc 11th February 2009 th 12 February 2009 Active (Approved by Computing Policy Committee Feb 2009) Pages: 1 In support of the UCL Information Security Policy (http://www.ucl.ac.uk/cert/swg/policy.html) the following shall apply: 1. 2. Ownership of Laptop Computers 1.1. Users purchasing laptops on behalf of the Institute are strongly advised to seek the advice of their system administrator before ordering, to avoid inappropriate or unsuitable purchases. Laptops must be purchased through suppliers approved by UCL Procurement. 1.2. Where a laptop has been purchased through UCL funds it will remain the property of UCL and on the asset register until such a time as it is authorised to be removed, which will normally be end-oflife. In situations where the Institute agrees that ownership of a laptop is effectively transferred to the user, all IoN/UCL software will be removed and subsequent requests for network connectivity will be assessed as per point 2.1.2 below. 1.3. A laptop will not be configured to access the network or have IoN/UCL licensed software installed until confirmation of ownership has been received by the system administrator responsible for the network it will join. Connection to the IoN/UCL Network 2.1. In order that connections are controlled, laptops will be classified as follows: 2.1.1. Category 1 – Purchased by IoN/UCL. These laptops will be installed with UCL/IoN licensed software and configured to access the network. Network resources will be controlled via central authentication (e.g. Active Directory). 2.1.2. Category 2 – Privately owned by IoN/UCL user. Laptops will be security checked for existence of a patched/secure operating system, working antivirus and user authentication controls. No UCL site licensed software will be installed, other than antivirus if not already present. If the network administrator considers the laptop to be secure, it will be configured for stand-alone network access. Where a laptop fails, it will be the responsibility of the user to undertake any remedial work required to make it secure. 2.1.3. Category 3 – Privately owned by non IoN/UCL user. Laptops will be restricted to basic internet access, either through VisiNet or similarly authenticated wireless service. Access to local network resources will be denied. UCL Institute of Neurology Computer Unit No.7 (Basement) Queen Square London WC1N 3AR Tel: +44 (0)20 7676 2171 support@ion.ucl.ac.uk www.ion.ucl.ac.uk/computing