1.0 Overview
Florida Rock & Tank Lines Inc. is committed to protecting our employees,
partners and the customers from illegal or damaging actions by individuals, either
knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer
equipment, software, operating systems, storage media, network accounts providing
electronic mail, WWW browsing, and FTP, are the property of Florida Rock & Tank
Lines Inc. These systems are to be used for business purposes in serving the interests
of the company, and of our clients and customers in the course of normal operations.
Please review Human Resources policies for further details.
Effective security is a team effort involving the participation and support of every
Florida Rock & Tank Lines Inc. employee and affiliate who deals with information
and/or information systems. It is the responsibility of every computer user to know
these guidelines, and to conduct their activities accordingly.
2.0 Purpose
The purpose of this policy is to outline the acceptable use of computer equipment
and web applications at Florida Rock & Tank Lines Inc. These rules are in place
to protect the employee, customers and Florida Rock & Tank Lines Inc. Inappropriate
use exposes Florida Rock & Tank Lines Inc. to risks including virus attacks,
compromise of network systems and services, and legal issues.
3.0 Scope
This policy applies to employees, customers of, consultants, and other individuals
who are authorized to access Florida Rock & Tank Lines Inc. systems, including
all personnel affiliated with third parties. This policy applies to all equipment
that is owned or leased by Florida Rock & Tank Lines Inc.
4.0 Policy
4.1 General Use and Ownership
1. While Florida Rock & Tank Lines Inc.'s network administration desires
to provide a reasonable level of privacy, users should be aware that the data they
create on the corporate systems remains the property of Florida Rock &
Tank Lines Inc. Because of internet insecurity potential, Florida Rock &
Tank Lines Inc. cannot guarantee the confidentiality of information stored on any
network device belonging to Florida Rock & Tank Lines Inc.
2. Employees are responsible for exercising good judgment regarding the reasonableness
of personal use. In the absence of such policies, employees should be guided by
departmental policies on personal use, and if there is any uncertainty, employees
should consult their supervisor or manager.
3. For security and network maintenance purposes, authorized individuals within Florida
Rock & Tank Lines Inc. may monitor equipment, systems and network traffic at
any time, per Florida Rock & Tank Lines Inc. Audit Policy.
4. Florida Rock & Tank Lines Inc. reserves the right to audit networks
and systems on a periodic basis to ensure compliance with this policy.
4.2 Security and Proprietary Information
1. The user interface for information contained on Internet/Intranet/Extranet-related
systems should be classified as either confidential or not confidential, as defined
by corporate confidentiality guidelines, details of which can be found in Human
Resources policies. Examples of confidential information include but are not limited
to: company private, corporate strategies, competitor sensitive, trade secrets,
specifications, customer lists, and research data. Employees should take all necessary
steps to prevent unauthorized access to this information.
2. Keep passwords secure and do not share accounts. Authorized users are responsible
for the security of their passwords and accounts. System level passwords should
be changed quarterly; user level passwords should be changed every six months.
3. All PCs, laptops and workstations should be secured with a password-protected
screensaver with the automatic activation feature set at 10 minutes or less, or
by logging-off (control-alt-delete for Win2K users) when the host will be
unattended.
4. Because information contained on portable computers is especially vulnerable,
special care should be exercised. Protect laptops in accordance with the "Laptop
Security Tips".
5. Postings by employees from a Florida Rock & Tank Lines Inc. email address
to newsgroups should contain a disclaimer stating that the opinions expressed are
strictly their own and not necessarily those of Florida Rock & Tank Lines
Inc., unless posting is in the course of business duties.
6. All hosts used by the employee that are connected to the Florida Rock &
Tank LinesInc. Internet/Intranet/Extranet, whether owned by the employee or Florida
Rock & Tank Lines Inc., shall be continually executing approved virus-scanning
software with a current virus database. Unless overridden by departmental or group
policy.
7. Employees must use extreme caution when opening e-mail attachments received
from unknown senders, which may contain viruses, e-mail bombs, or Trojan horse code.
4.3. Unacceptable Use
The following activities are, in general, prohibited. Employees may be exempted
from these restrictions during the course of their legitimate job responsibilities
(e.g., systems administration staff may have a need to disable the network access
of a host if that host is disrupting production services).
Under no circumstances is an employee or customer of Florida Rock & Tank
Lines Inc. authorized to engage in any activity that is illegal under local, state,
federal or international law while utilizing Florida Rock & Tank Lines
Inc.-owned resources.
The lists below are by no means exhaustive, but attempt to provide a framework for
activities, which fall into the category of unacceptable use.
System and Network Activities
The following activities are strictly prohibited, with no exceptions:
1. Violations of the rights of any person or company protected by copyright,
trade secret, patent or other intellectual property, or similar laws or regulations,
including, but not limited to, the installation or distribution of "pirated" or
other software products that are not appropriately licensed for use by Florida Rock
& Tank Lines Inc.
2. Unauthorized copying of copyrighted material including, but not limited
to, digitization and distribution of photographs from magazines, books or other
copyrighted sources, copyrighted music, and the installation of any copyrighted
software for which Florida Rock & Tank Lines Inc. or the end user does
not have an active license is strictly prohibited.
3. Exporting software, technical information, encryption software or technology,
in violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
4. Introduction of malicious programs into the network or server (e.g.,
viruses, worms, Trojan horses, e-mail bombs, etc.).
5. Revealing your account password to others or allowing use of your account
by others. This includes other individuals in the same company, other companies
affiliated or non-affiliated, family, and other household members when work is being
done at home.
6. Using a Florida Rock & Tank Lines Inc. computing asset to actively
engage in procuring or transmitting material that is in violation of sexual harassment
or hostile workplace laws in the user's local jurisdiction.
7. Making fraudulent offers of products, items, or services originating from
any Florida Rock & Tank Lines Inc. account.
8. Making statements about warranty, expressly or implied, unless it is a part
of normal job duties.
9. Effecting security breaches or disruptions of network communication. Security
breaches include, but are not limited to, accessing data of which the individual
or company is not an intended recipient or logging into a server or account that
the individual is not expressly authorized to access. For purposes of this section,
"disruption" includes, but is not limited to, network sniffing, pinged floods, packet
spoofing, denial of service, and forged routing information for malicious purposes.
10. Port scanning or security scanning is expressly prohibited.
11. Executing any form of network monitoring which will intercept data not
intended for the individual's, employee's or customer's host, unless this activity
is a part of the employee's normal job/duty.
12. Circumventing user authentication or security of any host, network or account.
13. Interfering with or denying service to any user other than the individual's
host (for example, denial of service attack).
14. Using any program/script/command, or sending messages of any kind, with
the intent to interfere with, or disable, a user's terminal session, via any means,
locally or via the Internet/Intranet/Extranet.
15. Providing information about, or lists of, Florida Rock & Tank
Lines Inc. employees to parties outside Florida Rock & Tank Lines Inc.
16. Providing information about, or lists of, Florida Rock & Tank
Lines Inc. invoices to parties outside the intended Florida Rock & Tank
Lines Inc. customer or to individuals not authorized to see such information with
the intended customer's company.
Email and Communications Activities
1. Sending unsolicited email messages, including the sending of "junk mail"
or other advertising material to individuals who did not specifically request such
material (email spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the
poster's account, with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes
of any type.
6. Use of unsolicited email originating from within Florida Rock &
Tank Lines Inc.'s networks of other Internet/Intranet/Extranet service providers
on behalf of, or to advertise, any service hosted by Florida Rock & Tank
Lines Inc. or connected via Florida Rock & Tank Lines Inc.'s network.
7. Posting the same or similar non-business-related messages to large numbers
of Usenet newsgroups (newsgroup spam).
5.0 Enforcement
Any employee found to have violated this policy may be subject to disciplinary action,
up to and including termination of employment. Customers or third parties
that have violated this policy may have access revoked and be subject to legal action.
Legal action will be based solely on the discretion of Florida Rock & Tank
Lines Inc. unless local, state or federal laws and regulations are broken.
6.0 Definitions
Term Definition
Spam Unauthorized and/or unsolicited electronic mass mailings.
7.0 Revision History