preview

Cupcake Cuisine Policy Statement

Decent Essays
Open Document

Policy Statement
• The objective of this policy is to ensure Cupcake Cuisine has security controls to restrict access to software application features and data.
• The purpose of this policy is to protect the integrity and confidentiality of Cupcake Cuisine’s digital data and to prevent unintentional corruption, and any misuse of company assets.
Body
A. Policy Objective 1. User accounts will be created for each employee of Cupcake Cuisine through a cooperative company purchase of Employee Management software provided by Square.
2. Access to Software Applications will be Access to Software applications will restricted to only authorized users or processes least privilege.
3. The task of creating individualized employee accounts and determining …show more content…

Cupcake Cuisine’s designated IT manager must quarterly review all user accounts and access rights to detect dormant accounts and accounts with excessive privileges. Examples of accounts with excessive privileges include (in no particular order):
a. An active account assigned to an entity that is no longer affiliated with Cupcake Cuisine.
b. Unknown active accounts.
c. An active account with access rights for which the user’s role and responsibilities do not require access. For example, users that do not have authority or responsibility to approve expenses should not have access with approval permissions within a financial system. 6. Cupcake Cuisine’s designated IT manager must quarterly enforce password changes and go over the password policy guidelines in a team meeting with each employee present.
C. User Account Control Requirements
1. All users must use an email address and a password to access Cupcake Cuisine’s Systems and applications.

2. All users must adhere to password policy guidelines as defined by the password policy requirements, and as directed by Cupcake Cuisine’s the designated IT manager.

D. Password Guideline Requirements

1. Passwords must be set in accordance to password …show more content…

The designated IT manager must henceforth log into the administrator account and reset the password to this account following the password guidelines. The default administrator account has the ability to create custom roles.
F. Role Creation 1. You must establish a role creation for each employee you wish to create an accessible account for. In the next screen, the designated IT manager must create a role name first in the creation of a new role. ‘Under Role Information’, to the right of ‘Role name’, type in the description of the job, for the job title of another employee of Cupcake Cuisine. Note: Do not type in the first or last name of the employee.
G. Accessing Point of Sale and Modules within PoS
1. Once the designated IT manager has defined an employee’s role name, the screen will change allowing the option to toggle whether this role name has access to ‘Access Shared Point of Sale’. For brevity the Point of Sale will henceforth be referred to as PoS.
2. If toggled on, it grants 19 features of the PoS which may each individually turned on or off.
3. if kept off, this user has no access to the PoS the PoS modular features or any Square software applications that integrate with the Square such as Personnel, Payroll, Invoice, Payment, Capitol,.
H. POS: Least

Get Access
Related
Get Access