preview

Group Owner Responsibilities

Decent Essays

Define descriptively what kind of external partner is appropriate for these groups. We can also control some of this system properties side with the defined email addresses (i.e. *partner.com), however the list could be very long and possibly unmanageable so we might leave it undefined for now. Require the group owners to take/pass some brief training on our internal security requirements, managing an external group, and how to manage the partners access to the group.
Require a signed confidentiality/non-disclosure agreement with the partners ( we need to still check on the details around this one).
Anyone who wants to start an external access group will have to submit a support ticket or the Private\Secret group workflow needs to be changed to get routed to our governance team. If their use case is approved, then the Private or Secret group would be activated by the Admin team for …show more content…

Two Group Owners Are Required to Monitor Content Posted
It's always a good idea to have two group owners, so one can cover when the other is not in the office. For externally accessible groups this is a requirement. Both owners must have completed the security training, and both must enable notifications and commit to review any content posted in their group promptly. If anything inappropriate for viewing by group members gets posted, the group owners must remove it immediately. Remove Access Promptly
When external contributors cease working with , their access to all groups must be promptly removed. As the group owner Administrator, this vital security step is your responsibility. We will periodically audit externally accessible groups to ensure compliance, and permissions to create groups may be removed if the requirements for managing them securely have not been fulfilled. Remind Group Members

Get Access