Purpose
This policy defines the acceptable use of Carriyo's information systems, including computers, networks, email, internet, and cloud services. It aims to protect Carriyo, our employees, and our customers from risks associated with misuse of technology resources.
Scope
This policy applies to all Carriyo employees, contractors, and third-party users who are granted access to Carriyo's information systems and networks.
General Use
Authorized Use
- Carriyo systems are provided primarily for business purposes
- Limited personal use is permitted provided it does not interfere with work duties, consume excessive resources, or violate any Carriyo policy
- All users must comply with applicable laws and regulations
Prohibited Activities
- Unauthorized access to systems, accounts, or data
- Installation of unauthorized software or hardware
- Sharing credentials or authentication tokens
- Circumventing security controls or monitoring systems
- Transmitting confidential data through unapproved channels
- Using Carriyo resources for illegal activities
Email and Communications
- Email should be used responsibly and professionally
- Sensitive data must not be sent via unencrypted email
- Phishing or suspicious emails must be reported immediately to the security team
- Auto-forwarding of company email to external addresses is prohibited
Internet Use
- Internet access is provided for business purposes
- Access to malicious, illegal, or inappropriate websites is prohibited
- Downloads from untrusted sources are not permitted
- Use of unauthorized VPN services or proxy servers is prohibited
Cloud Services
- Only approved cloud services may be used for processing company data
- Sharing company data through personal cloud storage accounts is prohibited
- All cloud service usage must comply with Carriyo's data classification guidelines
Mobile Devices
- Company-issued and personal devices used for work must have screen locks enabled
- Lost or stolen devices must be reported immediately
- Remote wipe capability must be enabled on all devices with access to company data
Monitoring
Carriyo reserves the right to monitor the use of its information systems to ensure compliance with this policy. Monitoring is conducted in accordance with applicable privacy laws and Carriyo's privacy notices.
Enforcement
Violations of this policy may result in disciplinary action, revocation of access privileges, and where applicable, legal proceedings.