External Supplier Remote Access to Corporate Systems
Introduction
This policy promotes good practice to ensure that a secure and consistent process for external suppliers is followed. Supplier-specific remote desktop accounts are by default disabled until required, and only allow access to specific systems for specified time periods.
Key Points
- Supplier-specific accounts must be created for access to each specific remote desktop,
- These accounts remain disabled by default until required,
- Access to systems is only allowed during specific time periods, on request of the relevant service team.
The Policy Document
The complete policy can be found here (PDF, 116.9KB).
Guidance
Further guidance is currently under development.
The DTS Help pages (SHU staff only) contain further guidance on