Remote Work & Device Use Policy

Policy Statement

The Company recognizes the importance of providing employees with the flexibility to work remotely while maintaining data security, productivity, and compliance. This Remote Work & Device Use Policy establishes standards for remote work arrangements, use of Company and personal devices, and security measures to protect organizational information assets.

Objectives

• Provide guidelines for employees working remotely or using personal devices for business purposes.
• Ensure the confidentiality, integrity, and availability of Company information accessed remotely.
• Define responsibilities for remote employees to safeguard systems and data.
• Promote productivity, accountability, and secure collaboration in remote environments.

Scope and Applicability

This policy applies to all employees, contractors, consultants, and third parties who perform work remotely or access the Company's systems, data, or applications from off-site locations. It applies to all Company-provided devices and approved personal devices used for business activities.

Eligibility and Approval

Remote work arrangements must be approved by the employee's Department Head and HR Department. Eligibility is determined based on job function, performance, and operational requirements. The Company reserves the right to modify or revoke remote work privileges at any time.

Remote Work Expectations

• Employees must adhere to all Company policies, including confidentiality, data protection, and code of conduct.
• Work schedules, availability, and deliverables must be clearly defined and adhered to.
• Employees must ensure a safe, secure, and professional workspace free from distractions.
• Attendance for virtual meetings and timely communication are mandatory during business hours.

Device Use Policy

The Company may provide devices (e.g., laptops, phones, or tablets) for remote work. In some cases, employees may use personal devices under Bring Your Own Device (BYOD) guidelines.

• Only authorized devices with updated security software may be used for Company work.
• Personal devices must comply with security configurations defined by the IT Department.
• Employees are responsible for safeguarding devices from theft, damage, or unauthorized access.
• Lost or stolen devices must be reported to IT Security immediately.

Data Security and Access Controls

Remote workers must adhere to strict data security protocols to protect Company assets.

• Access to Company systems must be through secure VPN connections.
• Multi-Factor Authentication (MFA) is mandatory for all system logins.
• Data should not be stored locally on personal or portable devices unless encrypted.
• Confidential data must never be shared over unsecured networks or public Wi-Fi.
• Regular software updates and security patches must be installed promptly.

Use of Collaboration Tools

Employees must use only Company-approved platforms (e.g., Microsoft Teams, Google Workspace, Zoom, or Slack) for business communication and document sharing. Personal messaging apps or unapproved cloud storage tools must not be used for work-related activities.

Monitoring and Compliance

The Company reserves the right to monitor network access, device usage, and remote work performance for compliance and security purposes. All activities conducted on Company systems are subject to audit in accordance with IT and HR policies.

Incident Reporting

Employees must immediately report any data breaches, malware infections, or suspected unauthorized access to the IT Security and Compliance Departments. Prompt reporting enables timely investigation and mitigation of risks.

Return and Recovery of Equipment

Upon termination of employment or revocation of remote work privileges, all Company equipment, documents, and data must be returned immediately. The IT Department will ensure the secure deletion of Company data from personal or remote devices, where applicable.

Non-Compliance

Failure to comply with this policy may result in disciplinary action, revocation of remote work privileges, or termination of employment. Severe violations, such as data breaches or unauthorized disclosures, may lead to legal action under applicable laws.

Policy Review

This policy shall be reviewed annually or when significant technological or regulatory changes occur. All revisions shall be approved by the Board of Directors and communicated to relevant employees.

Employee Acknowledgment

I acknowledge that I have read and understood the Remote Work & Device Use Policy of the Company I agree to comply with all the terms outlined herein and to use Company systems responsibly and securely while working remotely.

Employee Name: __________________________

Signature: ______________________________

Date: _________________________________