Remote Access Policy
Remote access to our corporate network is essential but in many cases this remote access originates from networks that may already be compromised or are at a significantly lower security posture than our corporate network. While these remote networks are beyond the control of Tuxis's policy, we must mitigate these external risks the best of our ability.
The purpose of this policy is to define rules and requirements for connecting to Tuxis's network from any host. These rules and requirements are designed to minimize the potential exposure to Tuxis from damages which may result from unauthorized use of Tuxis resources. Damages include the loss of sensitive or company confidential data, intellectual property, damage to public image, damage to critical Tuxis internal systems, and fines or other financial liabilities incurred as a result of those losses.
This policy applies to all Tuxis employees, contractors, vendors and agents with a Tuxis-owned or personally-owned computer or workstation used to connect to the Tuxis network. This policy applies to remote access connections used to do work on behalf of Tuxis, including reading or sending email and viewing intranet web resources. This policy covers any and all technical implementations of remote access used to connect to Tuxis networks.
- It is the responsibility of Tuxis's employees, contractors, vendors and agents with remote access privileges to Tuxis's corporate network to ensure that their remote access connection is given the same consideration as the user's on-site connection to Tuxis
- When accessing the Tuxis network from a personal computer, Authorized Users are responsible for preventing access to any Tuxis computer resources or data by non-Authorized Users. Performance of illegal activities through the Tuxis network by any user (Authorized or otherwise) is prohibited. The Authorized User bears responsibility for and consequences of misuse of the Authorized User’s access.
- Authorized Users will not use Tuxis networks to access the Internet for outside business interests.
- Secure remote access must be strictly controlled with encryption (i.e., Virtual Private Networks (VPNs)) and strong pass-phrases.
- Authorized Users shall protect their login and password from anyone.
- While using a Tuxis-owned computer to remotely connect to Tuxis's corporate network, Authorized Users shall ensure the remote host is not connected to any other network at the same time, with the exception of personal networks that are under their complete control or under the complete control of an Authorized User or Third Party.
- All hosts that are connected to Tuxis internal networks via remote access technologies must be kept upt-to-date.