Code of Connection

to Norfolk County Council networks

for Full Service Access

This Code of Connection is a minimum requirement for particular organizations (third parties) or applications and is required to gain access to Norfolk County Council (NCC) networks.

I
(name of Chief Executive or equivalent) / of
(name of organization)
certify that the following baseline security measures for connection to Norfolk County Council (NCC) networks are in place and will be adhered to.
1. The organization abides by the NCC Corporate Information Security Policy.
2. Any system connected to NCC ismanaged in accordance with the NCC Corporate Information Security Policy.
3. Access to NCC is subject to identification and authentication controls appropriate to the type and classification of the service (e.g. passwords, token-based password systems, defined authentication protocols).
4. Links to other systems/networks not covered by a Code of Connection are not permitted during an active session.
5. Where direct (on-line) access to NCC-attached systems is allowed, authentication and access controls must be in place which meet or exceed NCC standards as defined in the NCC Corporate Information Security Policy.
6. Access controls are in place to ensure users are able to access only those NCC services for which they are authorized. / 7. The organization will not allow through connection from any other network. This specifically includes directly connected networks and networks initiated through dial-up connections.
8. One named individual is made responsible for the security of any system or network connecting to NCC.
9. All relevant staff are made aware of their responsibilities in relation to NCC security.
10. All incidents which constitute a threat to NCC are reported to NCC as and when they occur.
11. Advertising or any other form of unauthorized promotional activity on NCC is forbidden.
12. The organization must have up-to-date virus protection on equipment connecting to NCC.
Connection to external services
13. All files obtained through connection to external services are checked by an up-to-date virus checking facility before being used on any system connected to NCC.
14. Where the organization provides a permanent host system on the Internet or any related service, there must be no connection between this host system and NCC.
Signatures I certify that the above is true and understand that continuing failure to meet some or all parts of this Code of Connection may result in disconnection.
Signature...... Date......
Name......
Signature...... Date......
Name......

Any significant changes in the status of the organization should be communicated to Norfolk County Council via the Service Desk (01603–495800).