ARNSW Security Policy
ARNSW Security Policy
This policy outlines the responsibilities of members, volunteers, staff, contractors and other authorised users who are granted access to ARNSW systems, data and infrastructure through VK2Connect or associated services.
1. Purpose
The purpose of this Security Policy is to help protect the confidentiality, integrity and availability of ARNSW information, services and systems. Compliance with this policy supports the secure operation of VK2Connect and related ARNSW platforms.
2. Scope
This policy applies to all individuals granted access to ARNSW data, systems, networks or other digital and physical assets, including members, employees, contractors, volunteers and approved third parties.
3. Authorised Access
- Access to ARNSW systems and data is granted only for approved and legitimate purposes.
- Users must only access the systems, information and records required for their role or approved activity.
- Users must not attempt to access information or systems outside their authorisation.
- Credentials, including usernames and passwords, must not be shared or disclosed to unauthorised persons.
4. Data Security and System Use
- Unauthorised access, modification, deletion or distribution of ARNSW data is strictly prohibited.
- Any attempt to bypass security controls or access restricted information without proper authorisation will be treated as a security breach.
- Users must take reasonable care to protect devices, credentials and any ARNSW information they can access.
- Activities within ARNSW systems may be logged and monitored for operational, compliance and security purposes.
5. Consequences of Non-Compliance
Breaches of this policy may result in action appropriate to the circumstances, including:
- Suspension or revocation of system access;
- Internal disciplinary or membership-related action where applicable;
- Termination of employment, contract or authorised access arrangements where relevant;
- Referral to law enforcement or regulatory authorities under applicable Australian law.
6. Reporting Security Incidents
All suspected security incidents, including unauthorised access attempts, lost or stolen credentials, suspicious activity, or possible data exposure, must be reported as soon as possible.
Please report incidents to ARNSW via admin@arnswnet.org.au.
7. Acknowledgement and Agreement
By accessing ARNSW systems, VK2Connect or associated data, you acknowledge that you have read, understood and agree to comply with this policy. Failure to follow this policy may result in the actions outlined above.