Security
To prevent unauthorized access or exploitation of your organization's resources, all ActivConnect OPS-G users should
take the appropriate steps outlined in the security policy.
IT administrators are also responsible for maintaining the device network security and meeting the organization’s
security regulations.
Security policy
1. All user and administrator passcodes must conform to your organization's policies. Passcodes should be
relatively long and contain a combination of uppercase letters, lowercase letters, numeric characters and
punctuation characters.
2. Change administrator passcodes every 3 months, or as required by your organization's policies.
3. Change user passcodes every 30 days, or as required by your organization's policies.
4. We recommend turning off the password visibility function.
5. Don't use the same passcode more than once.
6. Don't share your passcode with anyone else, including your manager or family members.
7. Don't send passcodes via email.
8. Don't reveal passcodes on questionnaires or security forms.
9. Don't hint at the format of a passcode (for example, “my family name”).
10. Don't write passcodes down.
11. Don't store passcodes on unencrypted devices.
12. Any user suspecting that their passcode has been compromised must report it to the IT administrator and
immediately change all their passwords.
13. Protect the device with antivirus software.
14. To protect confidential data stored on the device, we recommend using device encryption.
15. Don't install apps that are from unknown sources.
16. We recommend disabling notifications when the device is locked.
17. If the device is compromised, the ITadministrator is responsible for taking any necessary actions.
User requirements
1. Users must use the device only with data that is relevant and essential to their role.
2. Users must report all hardware and software faults to the IT administrator.
3. If a user suspects that unauthorized access to data has occurred via the device, they must report it in line with
the organization's policy.
4. Don't install any software that is not intended for users.
5. Users must not load pirated software or illegal content onto the device.
6. Applications must only be installed from sources approved by Android.
7. The device must be kept up to date with software updates provided by the manufacturer. Check for software
updates every month.
8. The device must not be connected to devices that don't have up-to-date and enabled antivirus protection. The
connected device must also comply with the organization's policy.
9. External devices must be encrypted in line with the organization's policy.
ActivConnect OPS-G IT Administration Guide 13