Acceptable Use Policy

Morgan Sindall Group plc IT Acceptable Use Policy Information Security & Compliance

Protection of Morgan Sindall Group plc. and its subsidiaries’ (hereinafter the “Group”) business information and systems is essential. It is Group policy to ensure that all employees, contractors, consultants, temporary staff and other associates that may have access to Information Systems operated by the Group (‘employee’) complies with this Acceptable Use Policy.

General Computer Use

IT Resources - are provided for the benefit and furtherance of Group business only, and the Group reserves the right to remove such resources or access to IT Resources if these are used in an unacceptable manner.

Email and Instant Messaging

Legally binding contracts can be formed by email correspondence. Email traffic on the Group’s email server is corporate and carries the same official status as a letter written on Group letterhead. Employees are expected to apply high standards of care and attention to all email correspondence. It is the employee’s responsibility to ensure that they are authorised to send the message to an external company before it is sent.

Web browsing

The Group is specifically not responsible for any information that the employee views, reads, or downloads from the Internet. The Group may limit accessible Internet sites, categories and browsing times at its discretion please refer to divisional policy for further information.

Monitoring and Privacy

The Group reserves the right to monitor any and all use of the computer network. To ensure compliance with Group policies this may include the interception and review of any emails, Internet usage logs, instant message logs or other messages sent or received, inspection of data stored on personal file directories, hard disks, and removable media.

Social Networking

The increasing popularity of social media such as Facebook, Twitter and blogging, allow immediate and rapid distribution of opinion and information and should be used with caution. The Group has a Social Media policy that outlines the acceptable use of this medium. The Group may limit or block access to Social media, please refer to divisional policy for further information.

Copyright

The Group's computer systems and networks must not be used to download, upload, or otherwise handle illegal and/or unauthorised copyrighted content.

Peer-to-Peer (P2P) File sharing

Anonymous peer-to-peer (P2P) file sharing, typically used for downloading and distributing pirated software or video, is not allowed on the corporate network, or Group owned or approved systems.

Circumvention

Using a Morgan Sindall computer or Group provided asset to circumvent any security systems, on either Group owned or other systems by attempting to bypass or remove authentication systems, user-based systems, or escalating privileges is expressly prohibited.

Illegal Activity

No Group-owned or Group-provided IT Resource may be knowingly used for activities that are considered illegal under UK or EU law.

Personal Use

Reasonable personal use of Group systems is permitted as long as such usage does not negatively impact the corporate computer network, or impact the employee's job performance or that of any other employee, please refer to divisional policy for further information.

Security Incidents

If a security incident or breach of any security policies is discovered or suspected, the user must immediately notify his or her supervisor and/or service support desk and follow any applicable guidelines as detailed in the IT Security Incident Policy.

Mobile Devices

To facilitate improved communication some employees are issued with a mobile device. If you are provided with a mobile device, you must ensure that you use it as economically as possible, and at all times in accordance with law. The Group may at any time withdraw your mobile phone. For further details please refer to the Mobile Device Policy.

Privacy

Although the Group maintains the security and integrity of the Group's email facilities the Group cannot guarantee the privacy of any personal communications undertaken on Group owned equipment or systems.

Maintenance Windows

From time to time services may be unavailable due to planned service windows or other actions necessary to maintain systems reliability, performance or integrity.

User Identity and Passwords

Users are responsible for ensuring that their user account details and passwords are kept securely. User accounts and credentials to not be shared with other IT system users. Please refer to the Group IT Password Policy for further details.

Remote Working – Trusted networks

Any employee working remotely must position him or herself so that their work cannot be overlooked by any other person, and take reasonable precautions to safeguard the security of laptop computers and any IT Resources on which Group business is transacted. Guest and wireless hotspots must be used with extreme caution and only used when the ownership and integrity of such Wi-Fi networks can be guaranteed.

Responsibilities

All employees are responsible for ensuring compliance with the above requirements.

Conflict

In the event that Group and Divisional policy are conflicting, Morgan Sindall Group plc. policy is overriding.

Enforcement

Any employee found to have deliberately violated this policy may be subject to disciplinary action up to and including dismissal, in line with current divisional Human Resources policies

Acceptable Usage Policy - Version 1.2 - April 2017