RCIT-12 Reeves Remote Access Policy

IT Reeves County Remote Access Policy

Policy Statement:

The IT Reeves County recognizes the necessity for users to access information remotely to carry out official duties efficiently. This policy outlines the requirements for remote access to IT resources, ensuring compliance with ethical and legal standards. Remote access is subject to other IT policies, including the RC Electronic Communication and Remote Access (1) Policy.

Guidelines:

A. Requesting Remote Access:

- Remote access must be requested through an RCIT Help Desk app form.

- Approval is based on business need, and access may be revoked for policy violation or operational reasons.

- Personally owned devices require written approval from the IT Security Team.

B. Remote Access Sessions:

While connected remotely, users must adhere to the following requirements:

- Multifactor authentication is mandatory for all remote login access.

- All data transmitted to or from IT resources must be encrypted in transit.

- Remote endpoint devices must have security measures, OS security patches, and a personal firewall.

- Users on the SSL VPN gateway should disconnect when RC business is completed.

- Remote access should not exceed 12 continuous hours.

- Users are prohibited from connecting the RC network to any other network or device beyond the approved remote endpoint device.

- Downloading or storing Protected Information on personal devices is prohibited.

- Devices connecting remotely are subject to monitoring, including date, time, duration, endpoint identification, and traffic.

C. Lost Devices and Information Security Incident Reporting:

- Users must immediately report lost, stolen, or compromised endpoint devices to the RCIT Help Desk.

- Any unauthorized access or disclosure of Protected Information must be reported promptly to the RCIT Help Desk.

D. Policy Administration and Enforcement:

- Administered by the IT Reeves County IT Department.

- Exceptions may be requested through the RCIT Help Desk form and must be approved by the IT Department.

- Violations may result in disciplinary actions, access restrictions, termination, and legal consequences.

- Employment terms align with collective bargaining agreements between the IT Reeves County and unions.