IT-Policy---政策

WELCO TECHNOLOGY (SUZHOU) LIMITEDQuality Management SystemSubject:Information system PolicyDocument No.: MIS-001(E)Issue: 1Page: 6 of 6Revision: 1Effective Date: 07/03/02 WELCO TECHNOLOGY (SUZHOU)Distribution List: GM QA CCEOM Production FacilitySecurity GSM PMCHR&AD Finance MIS TE Store SalesMFE C&L Prepared By:MIS/Oliver Lee Reviewed By: Approved By:GM/1. Purpose目的To define Policy & Procedures of management information system with the purpose to protect and safe guard companys interest as well as to provide the better service for users.为了更好地规范MIS的准则和管理以及保护公司的利益和为用户提供更好的服务，制订本政策。2. Scope范围This policy is applicable to computer hardware, software and users in Welco Technology Suzhou本政策适用于华高科技（苏州）有限公司3. Please reference HR policy and employee hand book for undefined issue.未尽事宜参照人事行政部门颁布的规章制度。4. Activities行为准则4.1General rules of information technology system that users must observe:用户必须遵守的信息系统总则a) Do not move any MIS computer device to another location without permission from MIS. 未经MIS许可不得随意移动电脑设备的位置。b) Do not attempt to perform repairs or upgrades to device by yourself and unauthorized disassembly is forbidden. 不得自行修理或升级设备以及禁止各种未经授权的设备拆解。c) All software used on company computer must be Licensed, legal and Wongs Electronic Standard. Users cant install any Non-Wongs Electronic Standard software without the authorization of MIS; company will process regular checking if needed.所有公司电脑上使用的软件必需是合法的、拥有版权的，而且必需是符合公司标准的；未经MIS认可，禁止在电脑上安装任何非公司标准的软件,信息管理部将会定期进行检查。 d) Do not attempt to install software on your computer without M.I.S. permission. 不要尝试安装未经MIS许可的软件。e) All installed software need to be properly licensed. 所有安装的软件必须是有正当许可权。f) All software should be registered with the manufacturer under WELCOs name and license agreement must be kept at FIN Dept. 所有的软件许可必须是注册在华高 (苏州) 名下，并且许可证原件保存在财务部。g) Any Department purchase IT relate device (include software/hardware) must get MIS department confirmation before issue PO, otherwise Finance department should deny payment of such purchase until clearance from MIS.任何部门需要自行购买计算机软/硬件及数码相关产品必须得到信息管理部的确认,否则财务部将不会支付货款。4.2Email, Internet and Telecommunication System:电子邮件、互联网及电话系统：a) Our E-Mail systems, Internet and other telecommunication systems users that these tools should only be used for Management Approved Business Purposes Only.电子邮件、互联网及其他电话系统仅限于从事经批准的业务活动。 b) Information service in WTSZ is for the purpose of increasing productivity and not for non-business activities; e-mail service and internet service are intended primarily for business relate communication. That means users must use tools primarily for business related purposes, other non business related activities such as chatting, play games and reading novels, etc are forbidden.信息系统服务的提供是为了提高工作效率,包括电子邮件和因特网的使用也必须遵循这一原则,严禁任何与工作无关的如聊天,电子游戏,看小说等行为.c) While on-line user must adhere to the defined network procedures and practice good business etiquette.使用公司的邮件、网络和电话系统时，应遵循正确的使用条例并保持恰当的行为礼仪。d) Each users Internet activity is logged and can be viewed if necessary.每一个使用互联网的用户的行为均被在线记录。e) Filtering software is installed restricting access to inappropriate sites.过滤软件会限制访问一些不当的站点。f) Report immediately any suspicious abnormal activity of other users to the management.如果发现任何可疑或不正常的行为请立即报告给管理层。4.3Network and Security网络及安全a) Non-authorized computer device will be denied by company network and users are not allowed to bring personal computer device to company without advance permission from MIS.未经授权的计算机设备将被拒绝接入公司网络资源.未经允许禁止员工携带个人的计算机设备到公司.b) Inside the company, electronic file copy/transmission must through LAN; users can not use any removable storage device without advance authorization by both department head and MIS.在公司内文件的复制/传输必须通过局域网络进行,未经部门领导和MIS授权员工禁止使用移动存储设备. c) Do not propagate emails with big, graphics oriented attachments. It is forbidden to send such type of email just for funny or personal purpose. 尽量不要传递过大而且附带图形的邮件，严禁发送用于娱乐或个人目的的类似电子邮件.d) Users must keep passwords absolutely private. All passwords are confidential. Do not share password with other users. Any violations of this rule will be terminated service and be disciplined according to HR policy (Ref HR policy). 确保你的密码是私有的，所有的密码均视为机密，不要和其它人分享，有任何违反的情况将被停止服务和依据人事行政部门颁发的规章制度进行处分。e) Users must memorize their passwords. Do not write password on paper. 牢记你的密码并不要写在纸上。f) Select passwords that are hard to guess by selecting a combinations of characters form a group of words，so that they cannot be found in a dictionary. 一个强壮的密码是由大小写的字符组成并难以被猜测，这样的密码将不能在字典中查到。g) Log off the computer or lock up it if you are going to leave your workstation unattended. 离开座位时请注销或锁定电脑h) Do not leave sensitive or confidential information displayed on the monitor when you are not working on the computer.当你不在座位的时候，请不要将敏感或机密信息显示在你的电脑屏幕上。i) For safety and energy saving propose user must power off the computer when they off duty.为了安全和节省能源员工下班时必须关闭自己的计算机和显示器4.4 File Storage Service文件存储服务a) All users have been assigned rights to access certain software and data files on the file servers according to their specific needs. Additional access must be requested and given at the discretion of the MIS Manager. 用户依照需求被分配一定的权限以存取数据文件和软件，额外的访问需求必须提出申请并得到MIS经理的许可。b) All files stored on private home folders on the network can be accessed only by the owner of the folders, users with appropriate rights to the folder. 存在私人文件夹中的文件只能被文件夹的所有者访问，用户应当正确的使用私人文件夹，c) Common folders are equally accessible to all users of the network. 公共文件夹可以被网络中所有的用户访问。d) Beware that files stored in Temp folders can be viewed, modified, renamed or deleted by any network user. 存在临时文件夹中的文件能被所有用户读取修改或删除。e) Temp folder files may be deleted periodically without warning. 在临时文件夹中的文件定时清除并且不会提前警告。f) When a file is for public access, user should put the file in a Common access directory and notify the all users to find it in share folder on file server. 如果你需要每一个人都访问一个文件，将此文件放在公共文件夹中提醒他们去读取。 4.5IT Fixed Assets ControlIT固定资产管理a) IT Fixed Assets are planned and administrated by MIS Department. To ensure we maintain a high efficiency of service and support, no purchase, exchange and transfer of such assets between users without approval from MIS Department. IT固定资产由MIS部门统一管理。为了保证我们的服务和支持，其他部门和员工在未经MIS认可的情况下，不得进行IT固定资产的采购、互换及使用部门更换。 b) If IT Fixed Assets are lost or damaged, users should immediately complete a Fixed Assets Disposal Form. If users are responsible for the lost or damage, they have to compensate the assets lost amount to company.如果发生资产丢失或完全损坏，员工需立即填写固定资产报废表。如果该资产的损坏或丢失为员工责任，该员工需赔偿资产价值。 4.6IT Fixed Assets Allocation:固定资产分配Approval by MIS manager must be obtained for the following conditions:在下列情况下，员工需要得到MIS经理的批准：a) User resignation/termination return assets back to MIS.员工离开其岗位(资产交还MIS)b) Users get spare IT assets from MIS department.员工从MIS取得IT备用的资产c) Users transfer IT assets with other users.IT资产使用者更换d) Users IT assets transfer from one department to another.IT资产从一个部门更换到另一个部门4.7 Borrow Spare IT Fixed Assets:借用IT固定资产Users can borrow IT spare asset due to business need. They should fill out a form named “Receipt for IT properties borrowing” and get their functional manager and MIS Manager Approval. When such business need is no longer applied, users must return the borrowed IT asset back to MIS immediately.员工可以在工作需要时借用备用的IT资产。在借用时，应填写IT物品借用表并取得部门经理和MIS经理的批准。员工必需在MIS需要时或提及的业务已经结束或其他重要紧急情况下立即归还其借用的IT资产。4.8IT Fixed Assets Repair:IT固定资产的维修Users should return to MIS Department the malfunctioned IT Fixed Assets for repair. No unauthorized repair is allowed and Company will not be held responsible for repair cost without prior approval from MIS department. Users are responsible for the damage due to negligence thus users will be responsible for the repair cost or replacement cost if asset is beyond repair.员工必需把有故障的IT固定资产归还给MIS部门以便修理。公司将不承担未经MIS批准的维修费用。如果是人为损坏，有责任的员工必需承担维修及更换费用。4.9 INMS SystemINMS系统设备a) There are two kinds of interfaces in INMS network (computer compatible interface and INMS device only). INMS共有两种网络接口（计算机兼容的网口和INMS设备兼容的网口）。b) Without the permission from MIS department, user is forbidden to plug and unplug the computer/device from INMS network. 未经MIS的许可,严禁员工自行插拔生产线计算机和INMS