---
layout: page
section: security
categories: security
tags: security, iso270001, ISMS
title: Non-Wunderroot equipment policy
---
The purpose of this policy is to set out the conditions relating to the use of non-Wunderroot owned equipment for the processing and/or storage of Wunderroot Data and the Installation of software on non Wunderroot owned hardware. 
This document forms part of Wunderroot’s ISO 27001 Information Security Management System.
 
<h3>Responsibility</h3>
All staff who use non Wunderroot owned equipment and the managers of such staff.
It is the responsibility of staff using non Wunderroot owned equipment to comply with this policy.
 

<h3>Accessing Wunderroot Mail via Personally Owned Mobile Phones</h3>

Wunderroot staff connecting to send or receive emails using personally owned mobiles phones must comply with the guidance published in the Wunderway regarding emails.
 
<h3>Personally Owned Devices Storing Confidential Data</h3>

Wunderroot staff are permitted to carry out work based activities on their personally owned devices, where confidential data is accessed, amended, copied to/from a media device or printed. This excludes sending or receiving confidential data using personally owned equipment, unless this has previously been discussed with management.

Wunderroot staff shall only access suitable websites related to the topic of work during business hours, via personally owned PC’s, Laptops, Notepads or any other data management device.
 
<h3>Remote Working using Personally Owned Computers</h3>

Currently all Wunderroot staff and contractors work remotely however there are a number of prerequisites relating to the configuration of the computer being used that should be implemented beforehand, these are:
<ul>
	<li>Approved Anti Virus software</li>
	<li>Operating System Patching</li>
</ul>

This list is not exhaustive and may change without notice depending upon information security risks that arise.
 
<h3>Operational system</h3>

Wunderroot does not permit the use of non Wunderroot equipment to store confidential data whether sensitive, personal or business unless approved by the Management.
Users will be responsible for ensuring that any software used to process/store Wunderroot data is properly licensed and may be required to provide evidence of this.

All software used for processing/storing Wunderroot data must be compatible with Wunderroot software. If such software conflicts with any Wunderroot software or systems, or affects the performance of any Wunderroot software or systems, users will be required to remove it.

Users will be responsible for ensuring that regular secure backups of Wunderroot data to minimise the risk of loss of critical data, and may be required to provide evidence of such backups.


Fix filename of none/non-wunderroot equipment file
Fix filename of none/non-wunderroot equipment file
