Dear Colleagues,
The UOB Group IT Security Management Policy (“Policy”) have been updated and will take effect immediately.
The Policy applies to entities within the UOB Group with the exception of UOI and Associate Companies.
• Overseas subsidiaries shall adopt and adapt the Policy in accordance to their local operating environment where necessary. Where local regulatory requirements differ from the Policy, the more stringent requirements should be observed.
Compliance with the IT Security Management Policy applies to every employee, whether on permanent or temporary basis, who uses the Bank’s IT assets. Where there is a need for service providers or third parties to make use of the Bank’s IT assets, the business / support unit authorising such use must ensure that relevant security policies are made known to them for compliance.
The key changes in the IT Security Management Policy are:
1. Policy has been re-named as “Group IT Security Management Policy”
2. A new section added on Bring Your Own Device (BYOD) Controls (2.9.17 – 2.9.32)
3. Updates on risks and controls associated with Wireless communications (6.9)
We would like to remind all staff that information security is everyone’s responsibility. Security is only as strong as its weakest link. We urge all staff to be security-aware and consciously ensure that all business processes are carried out in a secure manner at all times.
A copy of the updated Policy can be found in UOB Policy Portal at UOB Xchange>Resources>UOB Policy Portal intranet website:
http://home2.sg.uobnet.com/sites/PolicyPortal/GroupTechnologyandOperations/Group%20Information%20Technology%20Security%20Management%20Policy.pdf
Please contact me (Tel: 64135891) or Ow Yuen Wan (Tel: 65724666) should you have any queries on the Policy.
Kind regards,
Kay Gee
Group Information Security,
Information Security and Technology & Operations Assurance (ISTOA)