IT Equipment and Security Policy

1. Day-One Equipment
New hires receive a company laptop and a two-factor authentication (2FA) hardware security key on their first day of employment. Equipment is shipped in advance for remote hires so that it arrives before their start date.

2. Password Requirements
All accounts require passwords to be changed every 90 days. Passwords must be at least 12 characters and cannot reuse any of the previous 5 passwords.

3. Two-Factor Authentication
Two-factor authentication is required to access company email, the HR portal, and all internal systems. Employees should register their hardware key or authentication app during their first week.

4. Mobile Device Management (MDM)
Personal phones or tablets must be enrolled in the company's Mobile Device Management (MDM) system before they can be used to access company email or calendar.

5. Software Installation
Only software approved by the IT department may be installed on company laptops. Requests for new software can be submitted through the IT service desk.

6. Reporting Security Incidents
Any suspected phishing email, lost device, or other security incident should be reported to the IT security team immediately through the internal helpdesk, available 24/7.
