Mobile Computing and Teleworking

POLICY

Mobile computing and teleworking is fully supported at ThingLogix, and encouraged. However, this does not excuse the mandatory compliance with all the policies and procedures dictated in this Wiki. Mobile and teleworking applies to smart phones, tablets, PDAs, smart watches, laptops or computers used outside the ThingLogix offices.

ThingLogix grants its employees the privilege of purchasing and using smartphones and tablets of their choosing at work for their convenience. ThingLogix reserves the right to revoke this privilege if users do not abide by the policies and procedures outlined below.

This policy is intended to protect the security and integrity of ThingLogix ’s data and technology infrastructure. Limited exceptions to the policy may occur due to variations in devices and platforms.

ThingLogix employees must agree to the terms and conditions set forth in this policy in order to be able to connect their devices to the company network.

Acceptable Use

• The company defines acceptable business use as activities that directly or indirectly support the business of ThingLogix.
• The company defines acceptable personal use on company time as reasonable and limited personal communication or recreation, such as reading or game playing.
• Employees are blocked from accessing certain websites during work hours/while connected to the corporate network at the discretion of the company. Such websites include, but are not limited to porn websites.
• Devices’ camera and/or video capabilities is not disabled while on-site.
• Devices may not be used at any time to:
  • Store or transmit illicit materials
  • Store or transmit proprietary information belonging to another company
  • Harass others
  • Engage in outside business activities
• Employees may use their mobile device to access the following company-owned resources: email, calendars, contacts, documents, etc.
• ThingLogix has a zero-tolerance policy for texting or emailing while driving and only hands-free talking while driving is permitted.

Devices and Support

• Smartphones including iPhone, Android phones are allowed, iPhone 6 and greater, Android Phones supporting OS 7 and higher.
• Tablets - iPad are allowed

Security

• In order to prevent unauthorized access, devices must be password protected using the features of the device and a strong password is required to access the company network.
• The company’s password policy: Please refer to Thinglogix Password Policy
• Rooted (Android) or jailbroken (iOS) devices are strictly forbidden from accessing the network.

Risks/Liabilities/Disclaimers

• While ThingLogix will take every precaution to prevent the employee’s personal data from being lost in the event it must remote wipe a device, it is the employee’s responsibility to take additional precautions, such as backing up email, contacts, etc.
• Lost or stolen devices must be reported to the company within 24 hours. Employees are responsible for notifying their mobile carrier immediately upon loss of a device.
• The employee is expected to use his or her devices in an ethical manner at all times and adhere to the company’s acceptable use policy as outlined above.
• The employee is personally liable for all costs associated with his or her device.
• The employee assumes full liability for risks including, but not limited to, the partial or complete loss of company and personal data due to an operating system crash, errors, bugs, viruses, malware, and/or other software or hardware failures, or programming errors that render the device unusable.
• ThingLogix reserves the right to take appropriate disciplinary action up to and including termination for noncompliance with this policy.

Mobile/Teleworking users shall:

• guard against unauthorized access to the mobile or telework systems by all other persons other than the user, including personal acquaintances and family;
• not leave mobile or telework systems unattended and unsecured;
• mobile and telework systems shall require password protection, auto-lock after period of non-use, and, where possible, enable remote wipe capabilities if lost.

In addition, when building mobile applications for customers or for ThingLogix use, any mobile application development must comply with the following requirements:

• Mobile applications can only access Foundry resources after using the Cognito Authentication
• Foundry API's should be utilized through the AWS API Gateway for direct data access

Cognito Authentication

Amazon Cognito provides authentication, authorization, and user management for web and mobile apps. Users can sign in directly with a user name and password, or through a third party such as Facebook, Amazon, or Google.

The two main components of Amazon Cognito are user pools and identity pools. User pools are user directories that provide sign-up and sign-in options for our app users. Identity pools enable us to grant users access to other AWS services. We use identity pools and user pools separately or together.

An Amazon Cognito user pool and identity pool used together

See the diagram for a common Amazon Cognito scenario. Here the goal is to authenticate your user, and then grant your user access to another AWS service.

1. In the first step your app user signs in through a user pool and receives user pool tokens after a successful authentication.
2. Next, your app exchanges the user pool tokens for AWS credentials through an identity pool.
3. Finally, your app user can then use those AWS credentials to access other AWS services such as Amazon S3 or DynamoDB.