Extracted text (via pymupdf_layout)
7591 characters
Maricopa County Title: Mobile Device Usage Number: A1612 Internal Policy Issue Date: 12/12/2012 Policy Category: Approved By: Revision No: N/A Information Technology Revision Date: N/A Initiating Department: OET I. PURPOSE To define the responsibilities of Authorized Users and Departments regarding the use of County-owned Mobile Devices. II. AUTHORITY This Policy is authorized by the Board of Supervisors pursuant to A.R.S. 11-251 (21). III. APPLICATION AND ENFORCEMENT This Policy applies to all Employees of Maricopa County elected offices, appointed Departments, and Special Districts working in a Department whose County-owned Mobile Device services are provided by the Office of Enterprise Technology (“OET”).Therefore, this Policy does not apply to the exception of the County Attorney’s Office and County Elections/Recorder’s Office. Appointing Authorities are responsible for enforcement of this Policy and may discipline Employees who violate this Policy up to and including termination of employment. IV. DEFINITIONS A. Application Store: A Web site for downloading free and paid applications from authorized third-party developers. It is accessible from the Mobile Device and may be integrated with associated desktop applications. B. Appointing Authority: An elected official, the single administrative or executive head of a Department, or the designated representative authorized to act in this capacity. C. Authorized Application: A program that the County has approved for use on a County Mobile Device. D. Authorized User: An Employee that meets this Policy’s criteria and has been approved by the Appointing Authority to use a County-owned Mobile Device. E. Department: A department is a division of the County (e.g., Office of Finance, Office of Enterprise Technology, Facilities Management Department, etc.) and 1 of 4 Maricopa County Title: Mobile Device Usage Number: A1612 Internal Policy Issue Date: 12/12/2012 Policy Category: Initiating Department: OET Revision No: N/A Information Technology Revision Date: N/A includes Special Districts which are the Flood Control District of Maricopa County, Maricopa County Library District and Stadium District. F. Employee: A person paid a wage, salary, or stipend from public monies in accordance with official entries on County payroll. This includes all classified, unclassified, temporary, contract employees, County volunteers and any temporary employee paid through the Maricopa County accounts payable process. For purposes of this Policy, “employee” includes individuals employed by the Superior Court of Arizona, Maricopa County. G. Encryption: The process of making data undecipherable without the appropriate decryption key. Encryption algorithms and security functions used for compliance with this Policy shall, at a minimum, meet the standards set forth by the National Institute of Science and Technology (NIST) in the Federal Information Processing Standard (FIPS) publication 140-2; however, it is not required that each individual cryptographic implementation be FIPS validated to achieve compliance with this policy. H. Mobile Device: Smart phone, tablet, laptop, ruggedized handheld device, etc., that is capable of using cellular services or connecting to the County network. I. Storage Medium: A device used to store data. Examples include a computer hard disk or USB “Flash Drive”. V. POLICY A. General Policy Statements / Program Eligibility 1. Appointing Authorities shall determine Employee’s eligibility to become an Authorized User of a County-owned Mobile Device and for selecting a service plan that is compatible with the Employee’s usage of the Mobile Device for County business. 2. Departments are responsible for all monthly fees associated with a Mobile Device used by the Department’s Authorized Users. 3. Authorized Users of a County-owned Mobile Device have no expectation of privacy when using the Mobile Device. 4. Authorized Users that are Non-Exempt Employees are prohibited from using any Mobile Device for County business unless the time spent on the Mobile Page 2 of 4 Maricopa County Title: Mobile Device Usage Number: A1612 Internal Policy Issue Date: 12/12/2012 Policy Category: Initiating Department: OET Revision No: N/A Information Technology Revision Date: N/A Device is recorded in the County’s payroll system. Non-exempt Employees must follow all relevant County policies regarding on-call/overtime. See Hours Worked and Overtime Policy, B7006. 5. Authorized Users shall: a. Assist in the protection of County data at all times. b. Be responsible for all use of the Mobile Device issued to them, including incidental personal use of the Mobile Device. c. Preserve all data in accordance with applicable retention schedules, public records requirements, and Department procedures on the Mobile Device that is not a duplicate of information stored on County IT systems (e.g. text messages, photos, Mobile Device created documents, etc.). d. Upon request from their Appointing Authority, surrender the Mobile Device to the County. e. Comply with all County policies, including but not limited to, A1609: Acceptable Use of County Technology Resources at all times when using a County-owned Mobile Device. f. Use County-owned Mobile Devices only for limited, incidental personal use so long as the County incurs no additional costs beyond the standard maintenance of the device. g. Release Maricopa County from all liability from any loss of personal data stored on a County-owned Mobile Device The County will not consider personal data stored on a County device private. h. Obtain Appointing Authority approval prior to purchasing any item from an Application Store on the Mobile Device for County purposes. i. Be responsible for any costs incurred for items Employee purchased on the Mobile Device for personal purposes from an Application Store. j. Not attempt to bypass security controls on Mobile Devices. Page 3 of 4 Maricopa County Title: Mobile Device Usage Number: A1612 Internal Policy Issue Date: 12/12/2012 Policy Category: Initiating Department: OET Revision No: N/A Information Technology Revision Date: N/A k. Not move County data from a Mobile Device to an unprotected device or Storage Medium, unless such movement is approved by Department procedure. 6. County IT departments shall be responsible for providing only data stored on County servers in response to requests for information (e.g., public record request, litigation discovery). B. Device Security and Support 1. If a Mobile Device is lost or stolen, the Authorized User must contact their Department’s information technology help desk immediately or as soon as practicable. 2. The password and Encryption keys used on Mobile Devices shall meet the minimum standards set by the Office of Enterprise Technology (OET). Elected Offices may supersede the OET password Encryption standards at the discretion of the Elected Office's Appointing Authority. 3. County data must be Encrypted when stored on any Mobile Device. C. Responsibilities 1. The Office of Enterprise Technology (OET) shall provide agents for Mobile Devices, and shall select Encryption products and/or services for supported devices in use by the County. 2. Department PC/LAN teams are responsible for basic troubleshooting of Mobile Devices and for working with OET to complete agent deployment and advanced troubleshooting. Department PC/LAN teams are also responsible for deploying Encryption software selected by OET or for procuring and deploying Encryption services for Mobile Devices within their Department. Page 4 of 4