Apple iOS Devices
Mobile Device Synchronisation Consent
Personal/Private (Non-BBC owned) Devices
I
BEFORE COMPLETING THIS FORM PLEASE READ THIS IMPORTANT NOTE FROM BBC INFORMATION SECURITY:
If you choose to use a personal device with the BBC’s Mobile Email Service that decision must be entirely yours and you need to be comfortable with the conditions you are signing up to below. BBC management cannot require you to use a personal device on the service. If your management consider that you absolutely need access to your email and calendar on a mobile device, in order to perform your role, a BBC device should be provided. If you feel you are being left with no choice, you should discuss this with your HR representative in the first instance.
___________________ confirm that I have read the BBC Mobile Device Configuration Standard for Apple iOS Devices (appended) and confirm that the Apple iOS mobile device that I intend to connect to the BBC’s Mobile E-mail Service (“MES”) has been configured with the settings set out in this standard. I further confirm by signing this document that I:
-
have read and agree to abide by the BBC’s Mobile Device Policy (as updated) for the duration of the time my mobile device is synced using the BBC’s MES.
-
understand and acknowledge that using the BBC’s MES to synchronise my BBC e-mails, calendar items and tasks with my personal mobile device is voluntary and that it is not a supported service.
-
understand and agree not to hold the BBC liable for any damage to my device in the event of an error or malfunction caused by synchronising my device with the BBC’s MES.
-
understand that by synchronising my phone with the BBC’s MES, the BBC will have the ability to remote wipe my mobile device.
-
understand and acknowledge that if my device is remote wiped, that this will result in a total loss of all data on my mobile device not just the BBC’s data, including all contacts, emails, MP3/MP4s, pictures and any other personal/private and/or business data contained on the mobile device.
-
will not hold the BBC liable for any remote wipe of my mobile device which is performed in accordance with my request or performed in accordance with BBC requirements.
-
understand that it is my responsibility to back up my mobile device and all private/personal information contained on my device in order to ensure restoration of information when appropriate.
-
understand that it is my responsibility to regularly synchronise my mobile device, in order to ensure all Software Patches and Operating System upgrades are automatically installed.
-
must report my lost or stolen synchronised device to the BBC for it to be remotely wiped before I have the sim card blocked by my network provider.
I understand and acknowledge that authorisation to synchronise my Apple iOS mobile device with the BBC’s MES is conditional on my compliance with the BBC Mobile Device Configuration Standard for Apple iOS devices and the BBC Mobile Devices Policy (and any subsequent amendment). I understand and acknowledge that should I fail to adhere to the referenced Policy and Standard, that the BBC may revoke my syncing capability with immediate effect.
Signed: ___________________ Date: ______________________
Name: ___________________ Dept: ______________________
Staff Number: _____________________ Device Model: ___________________
SUBMITTING YOUR FORM Once you have printed and physically signed your form. Please scan it and upload it to the webform here: http://tinyurl.com/SynchConsent [URL points to a location on gateway.bbc.co.uk]. If you do not have a scanner a physical submission option is available – see the bottom of the webform for details. You only need to scan/upload the first 2 pages.
BBC Mobile Device Configuration Standard
Apple iOS devices
Objectives and Scope
This standard sets out configuration requirements that must be applied to any Apple iOS devices as a condition for accessing the BBC’s Mobile E-mail Service to access your corporate email, calendar and contacts.
These are designed to ensure that BBC data is adequately protected from unauthorised access, both at rest and in transit over data networks, and to help ensure compliance with the Data Protection Act.
The following Apple iOS devices are supported at the time of writing:
-
Apple iPad (all versions)
-
Apple iPhone 3GS
-
Apple iPhone 4
-
Apple iPhone 4S
-
Apple iPod Touch 4G
Please note that Apple iPhone 3G and earlier models are not permitted as they do not support device encryption.
General Policy Statement
Use of mobile devices on the BBC network is subject to the BBC Mobile Devices Policy.
This can be found at: http://guidelines.gateway.bbc.co.uk/dq/is/mobile.shtml
This standard does not repeat the general principles already set out in that policy, rather it specifies platform specific security configuration settings that must be configured in order for an iOS based mobile device to be permitted to connect to the BBC’s Mobile E-mail Service.
Apple iOS Configuration Settings 1.1Device Locking -
Passcode (device) lock must be enabled with an alphanumeric passcode of at least 6 characters
-
Settings > General > Passcode Lock, then turn Simple Passcode off.
-
Set a 6 character or longer passcode containing letters and numbers
-
Passcode lock must be set to autoengage after 15 minutes
-
Settings > General > Passcode Lock and enter your passcode. Tap Require Passcode, then select 15 minutes for how long the iPhone can be locked before you need to enter a passcode to unlock it.
-
SIM lock should be enabled on iPhones with a PIN of at least 4 digits (6 recommended) – this protects against unauthorised calls being made on your account in the event the device is lost or stolen
-
iPhone:
Settings > Phone > SIM PIN
1.2Encryption -
Encryption is enabled on iOS4 devices by setting a passcode (see 3.1 above for how to do this).
-
You can verify encryption is enabled as “Data Protection is Enabled” is shown at the bottom of the Passcode Lock screen (Settings > General > Passcode Lock)
1.3Duration of sync’ed email -
Device should be configured to sync e-mail back by no more than 3 days
-
iPhone
-
Choose Settings > Mail, Contacts, Calendars > Exchange
-
In the Mail days to sync section > Select 3 days
-
iPad
-
Choose Settings > Mail, Contacts, Calendars
-
Click on the email address for your Exchange email account
-
In the Mail days to sync section > Select 3 days
1.4Jailbreaking -
Phone must not be jailbroken1.
1.5Anti-malware -
This is not currently required to be installed on the iPhone.
1.6Remote disablement and wiping -
Remote wipe functionality must be enabled.
-
Incorrect passcode entry functionality should be configured to wipe the device after 10 incorrect passcode attempts
-
Choose General > Passcode Lock, enter your passcode, and tap Erase Data to enable this functionality
-
Optional: Remote locking functionality is recommended to be configured if user is subscribed to the MobileMe service which enables it.
1.7SIRI voice activated assistant (iPhone 4S and newer devices only) -
SIRI voice commands must not be processed when the passcode lock is engaged.
-
Settings -> General -> Passcode Lock -> Siri -> OFF
1.8Smart Cover features (iPad 2 devices only) -
Smart Covers for iPad 2 devices must not be permitted to allow access to applications running on a locked device without entering the device passcode.
-
Settings -> General -> iPad Cover Lock/Unlock -> OFF
NB: If you are running iOS5.0.1 or higher this vulnerability should be fixed and you can dispense with this setting.
Technology, Distribution & Archive ã BBC MMXI
Name : Mobile Device Synching Consent – Private Devices
|
Page of
|
Authors : Penelope Jarvis, Andrew Sands
|
26/10/2012
|
Version : 2.2
|
|
Share with your friends: |