makernexuswiki - User contributions [en]

Talk:Acceptable Use and Security Policy

2019-05-15T06:10:22Z

Sbaker:

Items for discussion

* What separate policies do we want to put in around the OPEN DEVICES? IE you have to use resetting software, etc
* want to add 'tho shalt use antivirus' clause somewhere for all capable devices.
* determining how to isolate networks. IE staff use, workshop use (no internet), open/internet use
* want to add sections on data handling policies.
* want to add section on incident handling for reference the membership handbook appropriately for conflict resolution, etc
* Figure out what do we need of • Data Classification Policy • Data Protection Standard • Social Media Policy • Minimum Access Policy • Password Policy

Acceptable Use and Security Policy

2019-05-15T06:09:20Z

Sbaker: /* Blogging and Social Media */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,patent or other intellectual property, or similar laws or regulations, including, but not limited to, the installation or distribution of "pirated" or other software products that are not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization and distribution of photographs from magazines, books or other copyrighted sources, copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission, even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in violation of international or regional export control laws, is illegal. The appropriate management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms, Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others. This includes family and other household members when work is being done at home by employees, volunteers, contractors and consultants.
# Using a Maker Nexus computing asset to actively engage in procuring or transmitting material that is in violation of sexual harassment or hostile workplace laws in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job duties.
# Effecting security breaches or disruptions of network communication. Security breaches include, but are not limited to, accessing data of which the employee is not an intended recipient or logging into a server or account that the employee is not expressly authorized to access, unless these duties are within the scope of regular duties. For purposes of this section, "disruption" includes, but is not limited to, network sniffing, pinged floods, packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to interfere with, or disable, a user's session, via any means, locally or via the Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside Maker Nexus without authorization from appropriate Maker Nexus staff.

=== Email Communications ===

When using Maker Nexus resources to access and use the Internet, employees, volunteers, consultants and contractors must realize they represent
the organization. Whenever employees state an affiliation, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of Maker Nexus".

Do not
# Send unsolicited email messages, including the sending of "junk mail" or other advertising material to individuals who did not specifically request such material (email spam).
# Send any form of harassment via email, telephone or paging, whether through language, frequency, or size of messages.
# Engage with unauthorized use, or forging, of email header information.
# Solicit email for any other email address, other than that of the poster's account, with the intent to harass or to collect replies.
# Create or forward "chain letters", "Ponzi" or other "pyramid" schemes of any type.
# Use unsolicited email originating from within Maker Nexus's networks of other Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service hosted by Maker Nexus or connected via Maker Nexus' network.
# Post the same or similar non-business-related messages to large numbers of Usenet newsgroups (newsgroup spam).

=== Blogging and Social Media ===
Blogging by employees, whether using Maker Nexus property, systems and networks or personal computer systems, is also subject to the terms and restrictions set forth in this Policy. Blogging is acceptable, provided that it is done in a professional and responsible manner, does not otherwise is not detrimental to Maker Nexus' best interests and mission, and does not interfere with an employee's regular work duties.

Maker Nexus Confidential Information policy also applies to blogging. As such, employees, volunteers, consultants, and contractors are prohibited from revealing any Maker Nexus confidential or proprietary information, trade secrets or any other material.

Employees shall not engage in any blogging that may harm or tarnish the image, reputation and/or goodwill of Maker Nexus and/or any of its employees. Employees are also prohibited from making any discriminatory, disparaging, defamatory or harassing comments when blogging or otherwise engaging in any conduct prohibited by Maker Nexus' Non-Discrimination and Anti-Harassment policies.

Employees may also not attribute personal statements, opinions or beliefs to Maker Nexus when engaged in blogging. If an employee is expressing his or her beliefs and/or opinions in blogs, the employee may not, expressly or implicitly, represent themselves as an employee or representative of Maker Nexus. Employees assume any and all risk associated with blogging.

Apart from following all laws pertaining to the handling and disclosure of copyrighted or export controlled materials, Maker Nexus trademarks, logos and any other intellectual property may also not be used in connection with any blogging activity with appropriate Maker Nexus staff authorization.

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

A contractor or consultant found to have violated this policy may be subject to disciplinary action, up to and
including termination of contract.

A volunteer, member or any other person found to have violated this policy may be subject to disciplinary action,
up to and including permanent termination of membership and restriction to enter the facility for any function.

== Related Standards, Policies and Processes ==

* Membership Handbook
* Employee and Volunteers Handbook
* [[Ethics and Conduct]]
• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Talk:Acceptable Use and Security Policy

2019-05-15T06:05:27Z

Sbaker: Created page with "Items for discussion * What separate policies do we want to put in around the OPEN DEVICES? IE you have to use resetting software, etc * want to add 'tho shalt use antivirus'..."

Acceptable Use and Security Policy

2019-05-15T05:58:16Z

Sbaker: /* Email Communications */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,patent or other intellectual property, or similar laws or regulations, including, but not limited to, the installation or distribution of "pirated" or other software products that are not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization and distribution of photographs from magazines, books or other copyrighted sources, copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission, even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in violation of international or regional export control laws, is illegal. The appropriate management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms, Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others. This includes family and other household members when work is being done at home by employees, volunteers, contractors and consultants.
# Using a Maker Nexus computing asset to actively engage in procuring or transmitting material that is in violation of sexual harassment or hostile workplace laws in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job duties.
# Effecting security breaches or disruptions of network communication. Security breaches include, but are not limited to, accessing data of which the employee is not an intended recipient or logging into a server or account that the employee is not expressly authorized to access, unless these duties are within the scope of regular duties. For purposes of this section, "disruption" includes, but is not limited to, network sniffing, pinged floods, packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to interfere with, or disable, a user's session, via any means, locally or via the Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside Maker Nexus without authorization from appropriate Maker Nexus staff.

=== Email Communications ===

When using Maker Nexus resources to access and use the Internet, employees, volunteers, consultants and contractors must realize they represent
the organization. Whenever employees state an affiliation, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of Maker Nexus".

Do not
# Send unsolicited email messages, including the sending of "junk mail" or other advertising material to individuals who did not specifically request such material (email spam).
# Send any form of harassment via email, telephone or paging, whether through language, frequency, or size of messages.
# Engage with unauthorized use, or forging, of email header information.
# Solicit email for any other email address, other than that of the poster's account, with the intent to harass or to collect replies.
# Create or forward "chain letters", "Ponzi" or other "pyramid" schemes of any type.
# Use unsolicited email originating from within Maker Nexus's networks of other Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service hosted by Maker Nexus or connected via Maker Nexus' network.
# Post the same or similar non-business-related messages to large numbers of Usenet newsgroups (newsgroup spam).

== Blogging and Social Media ==

Blogging by employees, whether using Maker Nexus property, systems and networks or personal computer systems, is also subject to the terms and restrictions set forth in this Policy. Blogging is acceptable, provided that it is done in a professional and responsible manner, does not otherwise is not detrimental to Maker Nexus' best interests and mission, and does not interfere with an employee's regular work duties.

Maker Nexus Confidential Information policy also applies to blogging. As such, employees, volunteers, consultants, and contractors are prohibited from revealing any Maker Nexus confidential or proprietary information, trade secrets or any other material.

Employees shall not engage in any blogging that may harm or tarnish the image, reputation and/or goodwill of Maker Nexus and/or any of its employees. Employees are also prohibited from making any discriminatory, disparaging, defamatory or harassing comments when blogging or otherwise engaging in any conduct prohibited by Maker Nexus' Non-Discrimination and Anti-Harassment policies.

Employees may also not attribute personal statements, opinions or beliefs to Maker Nexus when engaged in blogging. If an employee is expressing his or her beliefs and/or opinions in blogs, the employee may not, expressly or implicitly, represent themselves as an employee or representative of Maker Nexus. Employees assume any and all risk associated with blogging.

Apart from following all laws pertaining to the handling and disclosure of copyrighted or export controlled materials, Maker Nexus trademarks, logos and any other intellectual property may also not be used in connection with any blogging activity with appropriate Maker Nexus staff authorization.

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

A contractor or consultant found to have violated this policy may be subject to disciplinary action, up to and
including termination of contract.

A volunteer, member or any other person found to have violated this policy may be subject to disciplinary action,
up to and including permanent termination of membership and restriction to enter the facility for any function.

== Related Standards, Policies and Processes ==

* Membership Handbook
* Employee and Volunteers Handbook
* [[Ethics and Conduct]]
• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:56:46Z

Sbaker: /* Blogging and Social Media */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,patent or other intellectual property, or similar laws or regulations, including, but not limited to, the installation or distribution of "pirated" or other software products that are not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization and distribution of photographs from magazines, books or other copyrighted sources, copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission, even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in violation of international or regional export control laws, is illegal. The appropriate management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms, Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others. This includes family and other household members when work is being done at home by employees, volunteers, contractors and consultants.
# Using a Maker Nexus computing asset to actively engage in procuring or transmitting material that is in violation of sexual harassment or hostile workplace laws in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job duties.
# Effecting security breaches or disruptions of network communication. Security breaches include, but are not limited to, accessing data of which the employee is not an intended recipient or logging into a server or account that the employee is not expressly authorized to access, unless these duties are within the scope of regular duties. For purposes of this section, "disruption" includes, but is not limited to, network sniffing, pinged floods, packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to interfere with, or disable, a user's session, via any means, locally or via the Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside Maker Nexus without authorization from appropriate Maker Nexus staff.

=== Email Communications ===

When using Maker Nexus resources to access and use the Internet, employees, volunteers, consultants and contractors must realize they represent
the organization. Whenever employees state an affiliation, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of Maker Nexus".

Do not
# Send unsolicited email messages, including the sending of "junk mail" or other advertising material to individuals who did not specifically request such material (email spam).
# Send any form of harassment via email, telephone or paging, whether through language, frequency, or size of messages.
# Unauthorized use, or forging, of email header information.
# Solicitation of email for any other email address, other than that of the poster's account, with the intent to harass or to collect replies.
# Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
# Use of unsolicited email originating from within Maker Nexus's networks of other Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service hosted by Maker Nexus or connected via Maker Nexus' network.
# Posting the same or similar non-business-related messages to large numbers of Usenet newsgroups (newsgroup spam).

== Blogging and Social Media ==

Blogging by employees, whether using Maker Nexus property, systems and networks or personal computer systems, is also subject to the terms and restrictions set forth in this Policy. Blogging is acceptable, provided that it is done in a professional and responsible manner, does not otherwise is not detrimental to Maker Nexus' best interests and mission, and does not interfere with an employee's regular work duties.

Maker Nexus Confidential Information policy also applies to blogging. As such, employees, volunteers, consultants, and contractors are prohibited from revealing any Maker Nexus confidential or proprietary information, trade secrets or any other material.

Employees shall not engage in any blogging that may harm or tarnish the image, reputation and/or goodwill of Maker Nexus and/or any of its employees. Employees are also prohibited from making any discriminatory, disparaging, defamatory or harassing comments when blogging or otherwise engaging in any conduct prohibited by Maker Nexus' Non-Discrimination and Anti-Harassment policies.

Employees may also not attribute personal statements, opinions or beliefs to Maker Nexus when engaged in blogging. If an employee is expressing his or her beliefs and/or opinions in blogs, the employee may not, expressly or implicitly, represent themselves as an employee or representative of Maker Nexus. Employees assume any and all risk associated with blogging.

Apart from following all laws pertaining to the handling and disclosure of copyrighted or export controlled materials, Maker Nexus trademarks, logos and any other intellectual property may also not be used in connection with any blogging activity with appropriate Maker Nexus staff authorization.

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

A contractor or consultant found to have violated this policy may be subject to disciplinary action, up to and
including termination of contract.

A volunteer, member or any other person found to have violated this policy may be subject to disciplinary action,
up to and including permanent termination of membership and restriction to enter the facility for any function.

== Related Standards, Policies and Processes ==

* Membership Handbook
* Employee and Volunteers Handbook
* [[Ethics and Conduct]]
• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:55:38Z

Sbaker: /* Unacceptable Use */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,patent or other intellectual property, or similar laws or regulations, including, but not limited to, the installation or distribution of "pirated" or other software products that are not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization and distribution of photographs from magazines, books or other copyrighted sources, copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission, even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in violation of international or regional export control laws, is illegal. The appropriate management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms, Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others. This includes family and other household members when work is being done at home by employees, volunteers, contractors and consultants.
# Using a Maker Nexus computing asset to actively engage in procuring or transmitting material that is in violation of sexual harassment or hostile workplace laws in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job duties.
# Effecting security breaches or disruptions of network communication. Security breaches include, but are not limited to, accessing data of which the employee is not an intended recipient or logging into a server or account that the employee is not expressly authorized to access, unless these duties are within the scope of regular duties. For purposes of this section, "disruption" includes, but is not limited to, network sniffing, pinged floods, packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to interfere with, or disable, a user's session, via any means, locally or via the Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside Maker Nexus without authorization from appropriate Maker Nexus staff.

=== Email Communications ===

When using Maker Nexus resources to access and use the Internet, employees, volunteers, consultants and contractors must realize they represent
the organization. Whenever employees state an affiliation, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of Maker Nexus".

Do not
# Send unsolicited email messages, including the sending of "junk mail" or other advertising material to individuals who did not specifically request such material (email spam).
# Send any form of harassment via email, telephone or paging, whether through language, frequency, or size of messages.
# Unauthorized use, or forging, of email header information.
# Solicitation of email for any other email address, other than that of the poster's account, with the intent to harass or to collect replies.
# Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
# Use of unsolicited email originating from within Maker Nexus's networks of other Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service hosted by Maker Nexus or connected via Maker Nexus' network.
# Posting the same or similar non-business-related messages to large numbers of Usenet newsgroups (newsgroup spam).

== Blogging and Social Media ==

# Blogging by employees, whether using Maker Nexus property, systems and networks or personal computer systems, is also subject to the terms and restrictions set forth in this Policy. Blogging is acceptable, provided that it is done in a professional and responsible manner, does not otherwise is not detrimental to Maker Nexus' best interests and mission, and does not interfere with an employee's regular work duties.
# Maker Nexus Confidential Information policy also applies to blogging. As such, employees, volunteers, consultants, and contractors are prohibited from revealing any Maker Nexus confidential or proprietary information, trade secrets or any other material.
# Employees shall not engage in any blogging that may harm or tarnish the image, reputation and/or goodwill of Maker Nexus and/or any of its employees. Employees are also prohibited from making any discriminatory, disparaging, defamatory or harassing comments when blogging or otherwise engaging in any conduct prohibited by Maker Nexus' Non-Discrimination and Anti-Harassment policies.
# Employees may also not attribute personal statements, opinions or beliefs to Maker Nexus when engaged in blogging. If an employee is expressing his or her beliefs and/or opinions in blogs, the employee may not, expressly or implicitly, represent themselves as an employee or representative of Mkaer Nexus. Employees assume any and all risk associated with blogging.
# Apart from following all laws pertaining to the handling and disclosure of copyrighted or export controlled materials, Maker Nexus trademarks, logos and any other intellectual property may also not be used in connection with any blogging activity with appropriate Maker Nexus staff authorization.

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

A contractor or consultant found to have violated this policy may be subject to disciplinary action, up to and
including termination of contract.

A volunteer, member or any other person found to have violated this policy may be subject to disciplinary action,
up to and including permanent termination of membership and restriction to enter the facility for any function.

== Related Standards, Policies and Processes ==

* Membership Handbook
* Employee and Volunteers Handbook
* [[Ethics and Conduct]]
• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:41:51Z

Sbaker: /* Unacceptable Use */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,patent or other intellectual property, or similar laws or regulations, including, but not limited to, the installation or distribution of "pirated" or other software products that are not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization and distribution of photographs from magazines, books or other copyrighted sources, copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission, even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in violation of international or regional export control laws, is illegal. The appropriate management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms, Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others. This includes family and other household members when work is being done at home by employees, volunteers, contractors and consultants.
# Using a Maker Nexus computing asset to actively engage in procuring or transmitting material that is in violation of sexual harassment or hostile workplace laws in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job duties.
# Effecting security breaches or disruptions of network communication. Security breaches include, but are not limited to, accessing data of which the employee is not an intended recipient or logging into a server or account that the employee is not expressly authorized to access, unless these duties are within the scope of regular duties. For purposes of this section, "disruption" includes, but is not limited to, network sniffing, pinged floods, packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to interfere with, or disable, a user's session, via any means, locally or via the Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

A contractor or consultant found to have violated this policy may be subject to disciplinary action, up to and
including termination of contract.

A volunteer, member or any other person found to have violated this policy may be subject to disciplinary action,
up to and including permanent termination of membership and restriction to enter the facility for any function.

== Related Standards, Policies and Processes ==

* Membership Handbook
* Employee and Volunteers Handbook
* [[Ethics and Conduct]]
• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:41:00Z

Sbaker: /* Unacceptable Use */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,patent or other intellectual property, or similar laws or regulations, including, but not limited to, the installation or distribution of "pirated" or other software products that are not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization and distribution of photographs from magazines, books or other copyrighted sources, copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission, even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in violation of international or regional export control laws, is illegal. The appropriate management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms, Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others. This includes family and other household members when work is being done at home by employees, volunteers, contractors and consultants.
# Using a Maker Nexus computing asset to actively engage in procuring or transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job duties.
# Effecting security breaches or disruptions of network communication. Security breaches include, but are not limited to, accessing data of which the employee is not an intended recipient or logging into a server or account that the employee is not expressly authorized to access, unless these duties are within the scope of regular duties. For purposes of this section, "disruption" includes, but is not limited to, network sniffing, pinged floods, packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to interfere with, or disable, a user's session, via any means, locally or via the Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

A contractor or consultant found to have violated this policy may be subject to disciplinary action, up to and
including termination of contract.

A volunteer, member or any other person found to have violated this policy may be subject to disciplinary action,
up to and including permanent termination of membership and restriction to enter the facility for any function.

== Related Standards, Policies and Processes ==

* Membership Handbook
* Employee and Volunteers Handbook
* [[Ethics and Conduct]]
• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:38:00Z

Sbaker: /* Related Standards, Policies and Processes */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

A contractor or consultant found to have violated this policy may be subject to disciplinary action, up to and
including termination of contract.

A volunteer, member or any other person found to have violated this policy may be subject to disciplinary action,
up to and including permanent termination of membership and restriction to enter the facility for any function.

== Related Standards, Policies and Processes ==

* Membership Handbook
* Employee and Volunteers Handbook
* [[Ethics and Conduct]]
• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:36:20Z

Sbaker: /* Non-Compliance */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

A contractor or consultant found to have violated this policy may be subject to disciplinary action, up to and
including termination of contract.

A volunteer, member or any other person found to have violated this policy may be subject to disciplinary action,
up to and including permanent termination of membership and restriction to enter the facility for any function.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:32:28Z

Sbaker: /* Exceptions */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

''Template''
* Title
** Date Approved/Time Limit:
** Exemption Statement:
** Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:30:50Z

Sbaker: /* Exceptions */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

# Title/Template
#; Date Approved/Time Limit:
#; Exemption Statement:
#; Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:30:28Z

Sbaker: /* Exceptions */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the appropriate Maker Nexus staff in advance.
Documentation should include: Date approve and any time limits and a statement of policy exemption and who it applies to along with a justification statement.

# Title/Template
; Date Approved/Time Limit:
; Exemption Statement:
; Justification Statement:

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:27:18Z

Sbaker: /* Scope */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section [[Acceptable_Use_and_Security_Policy#Exceptions]].<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the Infosec team in advance.

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:26:40Z

Sbaker: /* Scope */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section Acceptable_Use_and_Security_Policy#Exceptions.<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the Infosec team in advance.

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:25:59Z

Sbaker: /* Scope */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus. <br>
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section (EXCEPTIONS).<br>
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties. <br>
This policy applies to all DEVICES that are owned or leased by Maker Nexus.<br>
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.<br>
Connection to Maker Nexus networks implies acceptance of this policy.<br>

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the Infosec team in advance.

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:25:07Z

Sbaker: /* Scope */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus.
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES, those used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section
(EXCEPTIONS)
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties.
This policy applies to all DEVICES that are owned or leased by Maker Nexus.
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.
Connection to Maker Nexus networks implies acceptance of this policy.

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the Infosec team in advance.

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:24:42Z

Sbaker: /* Overview */

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and other file exchange protocols, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus.
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section
(EXCEPTIONS)
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties.
This policy applies to all DEVICES that are owned or leased by Maker Nexus.
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.
Connection to Maker Nexus networks implies acceptance of this policy.

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the Infosec team in advance.

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

Acceptable Use and Security Policy

2019-05-15T05:24:00Z

Sbaker: Created page with " == Overview == The intention for publishing an Acceptable Use Policy are not to impose restrictions that are contrary to Maker Nexus’s established culture of openness, trus..."

== Overview ==
The intention for publishing an Acceptable Use Policy are not to impose restrictions that
are contrary to Maker Nexus’s established culture of openness, trust and integrity.
We are committed to protecting the employees, volunteers and members and the organization from
illegal or damaging actions by individuals or groups, either knowingly or unknowingly.
Internet/Intranet/Extranet-related systems, including but not limited to computer equipment,
software, operating systems, storage media, network accounts providing electronic mail, WWW
browsing, and FTP, are the property of Maker Nexus. These systems are to be used for
purpose in serving the mission in the course of normal operations.

Effective security is a team effort involving the participation and support of every user
who deals with information and/or information systems. It is the responsibility of every
computer user to know these guidelines, and to conduct their activities
accordingly.

== Purpose ==
The purpose of this policy is to outline the acceptable use of computer equipment at Maker Nexus.
These rules are in place to protect the employee, volunteers, members and Maker Nexus. Inappropriate
use exposes Maker Nexus to risks including virus attacks, compromise of network systems
and services, and legal issues.
== Scope ==
This policy applies to the use of information in electronic devices including but not restricted to
general computing, storage and embedded control computing devices, IOT, and network resources (hereafter called 'DEVICES')
in accordance to the mission of Maker Nexus.
This policy applies to DEVICES intended for member and event/class participants (hereafter called 'OPEN DEVICES')
as well as CLOSED DEVICES used strictly for Maker Nexus internal use.

All employees, volunteers, contractors, consultants, temporary workers, members and event/class participants (hereafter called 'USER')
at Maker Nexus are responsible for exercising good judgment regarding appropriate use of
information, electronic devices, and network resources in accordance with Maker Nexus
policies and standards, and local laws and regulation.

Exceptions to this policy are documented in section
(EXCEPTIONS)
This policy applies to USERS at Maker Nexus, including all personnel affiliated with third parties.
This policy applies to all DEVICES that are owned or leased by Maker Nexus.
This policy applies to all personal DEVICES of USERS that connects to and transits Maker Nexus networks.
Connection to Maker Nexus networks implies acceptance of this policy.

== Policy ==

=== Ownership ===

Maker Nexus proprietary information stored on electronic and computing devices
whether owned or leased by Maker Nexus, the employee or a third party, remains
the sole property of Maker Nexus. You must ensure through legal or technical
means that proprietary information is protected in accordance best practices in
data protection standards.

Employees, volunteers and contractors have a responsibility to promptly report the theft,
loss or unauthorized disclosure of Maker Nexus proprietary information.

Employees, volunteers and contractors may access, use or share Maker Nexus proprietary information only to the
extent it is authorized and necessary to fulfill your assigned job duties.

Employees, volunteers and contractors are responsible for exercising good judgment regarding
the reasonableness of personal use and if there is any uncertainty, they should consult their supervisor or manager.

For security and network maintenance purposes, authorized individuals within
Maker Nexus may monitor equipment, systems and network traffic at any time.

Maker Nexus reserves the right to audit networks and systems on a periodic basis to
ensure compliance with this policy.

=== General Use ===

=== Security and Proprietary Information ===

All mobile and computing devices that connect to the internal network must comply with

System level and user level passwords must comply with the Password Policy. Providing
access to another individual, either deliberately or through failure to secure its access, is
prohibited.

All non-computing devices must be secured with a password-protected screensaver with the
automatic activation feature set to 10 minutes or less. You must lock the screen or log off
when the device is unattended.

USERS must use extreme caution when opening e-mail attachments received from
unknown senders, which may contain malware while using Maker Nexus DEVICES.

=== Unacceptable Use ===

The following activities are, in general, prohibited. Employees may be exempted from these
restrictions during the course of their legitimate job responsibilities (e.g., systems administration
staff may have a need to disable the network access of a host if that host is disrupting production
services).

Under no circumstances are USERS of Maker Nexus authorized to engage in any
activity that is illegal under local, state, federal or international law while utilizing Maker Nexus-owned resources.

The lists below are by no means exhaustive, but attempt to provide a framework for activities
which fall into the category of unacceptable use.

The following activities are strictly prohibited, with no exceptions:
# Violations of the rights of any person or company protected by copyright, trade secret,
patent or other intellectual property, or similar laws or regulations, including, but not
limited to, the installation or distribution of "pirated" or other software products that are
not appropriately licensed for use by Maker Nexus.
# Unauthorized copying of copyrighted material including, but not limited to, digitization
and distribution of photographs from magazines, books or other copyrighted sources,
copyrighted music, and the installation of any copyrighted software for which Maker Nexus or the USER
does not have an active license is strictly prohibited.
# Accessing data, a server or an account for any purpose other than serving the Maker Nexus mission,
even if you have authorized access, is prohibited.
# Exporting software, technical information, encryption software or technology, in
violation of international or regional export control laws, is illegal. The appropriate
management should be consulted prior to export of any material that is in question.
# Introduction of malicious programs into the network or server (e.g., viruses, worms,
Trojan horses, e-mail bombs, etc.).
# Revealing any account password to others or allowing use of your account by others.
This includes family and other household members when work is being done at home.
# Using a Maker Nexus computing asset to actively engage in procuring or
transmitting material that is in violation of sexual harassment or hostile workplace laws
in the user's local jurisdiction.
# Making fraudulent offers of products, items, or services originating from any Maker Nexus account or network.
# Making statements about warranty, expressly or implied, unless it is a part of normal job
duties.
# Effecting security breaches or disruptions of network communication. Security breaches
include, but are not limited to, accessing data of which the employee is not an intended
recipient or logging into a server or account that the employee is not expressly authorized
to access, unless these duties are within the scope of regular duties. For purposes of this
section, "disruption" includes, but is not limited to, network sniffing, pinged floods,
packet spoofing, denial of service, and forged routing information for malicious purposes.
# Port scanning or security scanning is expressly prohibited unless prior authorization by appropriate Maker Nexus staff.
# Executing any form of network monitoring which will intercept data not intended for the
employee's host, unless this activity is a part of the employee's normal job/duty.
# Circumventing user authentication or security of any host, network or account.
# Introducing honeypots, honeynets, or similar technology on the Maker Nexus network.
# Interfering with or denying service to any user other than the employee's host (for
example, denial of service attack).
# Using any program/script/command, or sending messages of any kind, with the intent to
interfere with, or disable, a user's terminal session, via any means, locally or via the
Internet/Intranet/Extranet.
# Providing information about, or lists of, Maker Nexus employees, volunteers, consultants, contractors, members or other visitors to parties outside
Maker Nexus without authorization from appropriate Maker Nexus staff.

When using company resources to access and use the Internet, users must realize they represent
the company. Whenever employees state an affiliation to the company, they must also clearly
indicate that "the opinions expressed are my own and not necessarily those of the company".
Questions may be addressed to the IT Department
1. Sending unsolicited email messages, including the sending of "junk mail" or other
advertising material to individuals who did not specifically request such material (email
spam).
2. Any form of harassment via email, telephone or paging, whether through language,
frequency, or size of messages.
3. Unauthorized use, or forging, of email header information.
4. Solicitation of email for any other email address, other than that of the poster's account,
with the intent to harass or to collect replies.
5. Creating or forwarding "chain letters", "Ponzi" or other "pyramid" schemes of any type.
6. Use of unsolicited email originating from within <Company Name>'s networks of other
Internet/Intranet/Extranet service providers on behalf of, or to advertise, any service
hosted by <Company Name> or connected via <Company Name>'s network.
7. Posting the same or similar non-business-related messages to large numbers of Usenet
newsgroups (newsgroup spam).
4.3.3 Blogging and Social Media
1. Blogging by employees, whether using <Company Name>’s property and systems or
personal computer systems, is also subject to the terms and restrictions set forth in this
Policy. Limited and occasional use of <Company Name>’s systems to engage in
blogging is acceptable, provided that it is done in a professional and responsible manner,
does not otherwise violate <Company Name>’s policy, is not detrimental to <Company
Name>’s best interests, and does not interfere with an employee's regular work duties.
Blogging from <Company Name>’s systems is also subject to monitoring.
2. <Company Name>’s Confidential Information policy also applies to blogging. As such,
Employees are prohibited from revealing any <Company> confidential or proprietary
information, trade secrets or any other material covered by <Company>’s Confidential
Information policy when engaged in blogging.
3. Employees shall not engage in any blogging that may harm or tarnish the image,
reputation and/or goodwill of <Company Name> and/or any of its employees. Employees
are also prohibited from making any discriminatory, disparaging, defamatory or harassing
comments when blogging or otherwise engaging in any conduct prohibited by <Company
Name>’s Non-Discrimination and Anti-Harassment policy.
4. Employees may also not attribute personal statements, opinions or beliefs to <Company
Name> when engaged in blogging. If an employee is expressing his or her beliefs and/or
opinions in blogs, the employee may not, expressly or implicitly, represent themselves as
an employee or representative of <Company Name>. Employees assume any and all risk
associated with blogging.
5. Apart from following all laws pertaining to the handling and disclosure of copyrighted or
export controlled materials, <Company Name>’s trademarks, logos and any other
<Company Name> intellectual property may also not be used in connection with any
blogging activity

== Policy Compliance ==

=== Compliance Measurement ===

Designated Maker Nexus staff will verify compliance to this policy through various methods, including but
not limited to, business tool reports, internal and external audits, and feedback to the policy
owner.

=== Exceptions ===

Any exception to the policy must be approved by the Infosec team in advance.

=== Non-Compliance ===

An employee found to have violated this policy may be subject to disciplinary action, up to and
including termination of employment.

== Related Standards, Policies and Processes ==

• Data Classification Policy
• Data Protection Standard
• Social Media Policy
• Minimum Access Policy
• Password Policy

== Definitions and Terms ==

The following definition and terms can be found in the SANS Glossary located at:
https://www.sans.org/security-resources/glossary-of-terms/
* Blogging
* Honeypot
* Honeynet
* Proprietary Information
* Malware
* Spam

User:Sbaker

2019-05-15T03:30:55Z

Sbaker:

Welcome! I've been a maker since my dad set me up with hammer and nails early to keep me out of his other woodworking tools. My Mom crafted and carved. I am the 'handy person' about the house and work.

Personal goal - I read this when I was in high school. Still working on a few.
“A human being should be able to change a diaper, plan an invasion, butcher a hog, conn a ship, design a building, write a sonnet, balance accounts, build a wall, set a bone, comfort the dying, take orders, give orders, cooperate, act alone, solve equations, analyze a new problem, pitch manure, program a computer, cook a tasty meal, fight efficiently, die gallantly.
Specialization is for insects.”
~ Robert Anson Heinlein

* Best way to reach me: MakerNexus Slack.
* About me at work: http://linkedin/in/sabaker
* Writings:
** https://dragongirlrobots.com
** https://wordpress.com/view/sarahannebaker.wordpress.com

Drafting some material for the WIki.
* [[Ethics and Conduct]]
* [[Child Protection Policies and Procedures]]
* [[Acceptable Use and Security Policy]]
* '''Jobs'''
** [[Board of Directors]]
** paid positions
*** [[General Manager]]
*** [[Accounting]]
*** [[Marketing and Outreach Manager]]
** volunteer positions
*** [[Volunteer Coordinator]]
*** [[Volunteer Shop Area Lead]]
* "Other"
** [[MN Design Style Guidelines]]
** [[Draft Membership Handbook]]
** see the MakerNexus Google docs for more:
*** Employees and Volunteers handbook.

Other Material:
* Drafted a simple Injury Report Form
* Launch Plan: Organizational Readiness - added some clarifications, expansion of areas, questions...

Didn't make
* Education Manager as there's already - "Education Manager Statement of Work" for contracting. Should it be turned into a wiki page?

Ethics and Conduct

2019-05-15T03:07:18Z

Sbaker:

'''DRAFT''' (add comments on discussion tab)

Everyone must sign a liability waver.<br>
Members will be asked to read and agree to this ethics and conduct as part of membership signup. <br>
Adult Guests will be asked to read and agree to this ethics and conduct as part of accompanying a member.<br>
We want you to know what 'safe' means at MakerNexus

MakerNexus strives to provide access for useful and well maintained equipment and project space. <br>
A community of like minded persons come together to learn, use and develop within the space.<br>
MakerNexus expects all who come (member or guest) to conduct themselves with highest regard to safety for themselves and others.

== Guest and Minors ==
* Members are responsible for guests and/or minors and their actions.
* Guests are encouraged to become members.
* Guests are not allowed to use tools and equipment, except as part of a scheduled class/workshop.
* Minors must be accompanied closely by a legal parent or guardian. This includes scheduled class/workshops unless there's special provision to manage unaccompanied minors. 'Accompanied closely' means visual range generally, and immediate reach when near dangerous equipment.
* MakerNexus is fully committed promoting and protecting children's rights, please review [[Child Protection Policies and Procedures]] for more details.

== Creating a Safe Space for All ==
Please maintain situational awareness at all times to insure there is no potential to injure yourself or others.

Safety takes many forms.

The following constitute grounds for explusion without refund.
* Violating any federal, state, or local laws, facility rules.
* Failure to comply with the instructions of Staff
* Using anything in a threatening or destructive manner against person or property
* Endangering the safety of oneself or others
* Threatening, stealing, cheating, hazing, stalking, harassing or otherwise treating others other than excellently.
* Failure to conduct oneself in a mature manner.
If you experience or witness any of the above, speak up and politely explain to those violating what behavior was unacceptable. Address issues immediately. Alert Staff to the situation.

===No Harrassment Policy===
MakerNexus is dedicated to providing a harassment-free experience for everyone, regardless of gender, sexual orientation, disability, physical appearance, body size, race, religion, or affiliation. It is a most basic form of safety, and we will not tolerate harassment in any form. It is grounds for expulsion without refund.
This includes:
* Offensive comments related to race, religion, gender, gender identity and expression, sexual orientation, disability, or physical appearance
* Gratuitous sexual or obscene images or behavior in spaces where not appropriate
* Unwelcome physical contact or sexual attention without consent or after a request to stop
* Threats or incitement of violence towards any individual, including encouraging a person to engage in self-harm
* Deliberate intimidation by words, gestures, body language, or menacing behavior
* Stalking
* Harassing photography or recording, including logging online activity for harassment purposes
* Continued one-on-one contact or communication after requests to cease
* Deliberate "outing" of a sensitive aspect of a person’s identity, health, history, etc without their consent
* Deliberate misgendering. This includes deadnaming or persistently using a pronoun that does not correctly reflect a person's gender identity

===Non Descrimination Policy===
MakerNexus does not promote or discriminate against any person, population group, or organization with regard to categories protected by applicable United States law. These include, but are not limited to race, color, religion, sex, gender expression, physical appearance, language, education background, national origin, age, disability, and veteran status.

===Preparing for Safety===
Do not engage in behaviors or actions that infringe on the rights of other or/and a safety issue to self or others.

Preparing for Safety includes but is no limited to
* No animals on premise. Please don't leave animals in cars, it's often not safe for them there either. Service animals as defined by the ADA may be allowed as long as the animal and owner are in a safe part of the makerspace. Owners of a service animal must note that normal makerspace activities can include sudden loud noises and flashes of light and ground shaking that can upset even a well trained Service Animal. Owners should consider other options before bringing their service animal into the makerspace.
* Mimimize distractions, turn off cell phones, etc.
* No being under the influence of intoxicating substances on premise.
* No being under the influence of any substance the impairs the members ability to safely use the equipment. This includes over the counter medications that may cause drowsiness or other affects that are inappropriate to a safe working environment.
* No smoking, cigars or vaporizers on premise.
* No excessive scents, perfume or body odor.
* Wear appropriate clothes. Additional requirements may be depend on the area of work. This may include safety glasses, hair containment, shirt sleeves, removal of jewelry, rings and others.
* Don't use gloves near power tools. They can be used to move materials to work areas.
* No open toe shoes.
* Respond to alarms and exit the facilities as soon as possible in a safe manner.
* Follow posted notices.
* Follow Staff direction.
* Excessive or distracting and disturbing noise other than necessary for facilities use and safety. No shouting or loud music.
* Don't leave items unattended.
* Obstruct the use of the resources by obstruction, by theft or deliberate misplacement of resources. No borrowing.

Inability to follow the guidelines outlined is grounds for review for expulsion. <br>
You will be held responsible for repeated or willful stupidity.

And, if you see anyone being particularly smart, careful and safe, please take a moment to provide a Thumbs Up! positive reinforcement if you aren't interrupting, or even mention it to the staff.

===Makerspace Facilities, Equipment and Shop Safety===

* If you aren't authorized to use a piece of equipment or material, don't use it.
* If you aren't trained on the proper use of a piece of equipment or material, don't use it. Get trained or ask for help by someone who is.
* If you are unsure how to do or use something safely, don't do it. Ask for assistance.
* No manufacturing of firearms or any item covered by the National Firearm Act.
* No manufacturing of fireworks or other items requiring specialized license without specific written authorization of the General Manager and the Board of Directors. Do not expect this authorization to be given.
* Report any injuries immediately. We're required to keep such records for the insurance company coverage and to review for safety improvements.

==== Use the Right Tool ====
... and use the tool right
* Keep equipment and tools in good working order.
* Don't talk to or distract persons working equipment or materials. Their safety depends on their focus to the task.
* Don't abuse, deface, or deliberately damage the facilities, equipment, materials and resources, both tangible and intangible.
* Report all broken or malfunctioning equipment, tools, etc. We can't fix it if we don't know about it. If you broke it, immediately report so it can be fixed quickly. It's Ok, breakage happens. If perhaps you need more training to avoid issues in future, no problem. The more immediate the training, the more likely you are to retain it for future use. Learning is part of a maker space.
* Don't use the equipment beyond recommended usage and tolerances without expert knowledge and appropriate mitigations. When in doubt, ask.
* Don't use dangerous equipment alone. Use the buddy system. Ask around if someone is free to keep an eye on you if you forgot to bring one with you.
==== Materials Management ====
* Be aware of your project as it moves through equipment and keep clearance in relation to yourself, others and other areas. For example: long poles and boards as they are pulled thru equipment may be thrown.
* Ensure materials move around the facility and are stored in a safe and approved manner.
** Don't walk thru the maker space with something dangerous (acid, etc) that's easy to spill. Put a lid on it.
** Don't store an acid in something it can eat thru sometime late at night when nobody is around. Keep it in an approved container.
** Don't store a flammable in an open container. Keep it in an approved container.
* Don't catch fire, don't set fire to others or to items that were not designed or designated to be set alight.
* Some materials are not appropriate to certain machines, and sometimes inappropriate to the makerspace entirely. Consult the [[MaterialsManagement |materials management]] or [[CaribbeanEquipment | equipment pages]] in the wiki for expanded information.

==== Clean Up ====
* Keep equipment and areas clean (this is part of safety too) every time you leave the equipment.
* Learn what clean means and leave an area that clean or cleaner than you found it.
* If you don't know how to clean something, ask for assistance. Leaving it because you don't know is not an excuse.
* Give yourself enough time to clean up before you need to leave.
* Don't use a rag around moving equipment.
* Put things back where they belong, if you don't know, ask for assistance.
* Can't get it clean? Need cleaning supplies? Ask for assistance.
* Use a brush or other tool to clear chips and shavings, never your hand.

=Incident Review and Remediation=
As with any group, disagreements happen. Mistakes happen. Members and Guests are expected to learn, discuss concerns and differences, and resolve issues in a calm and polite manner. Strive to see all sides of a situation, and use reasonable effort to resolve issues immediately.

If someone points out something wrong with your conduct, stop, take steps to insure immediate safety, clarify the issue and adjust.
If you can't come to a conclusion on the situation, reach out to staff for assistance.

The MakerNexus community will strive to
* make it as easy as possible to do the right thing to stay safe.
* make mistakes a normal part of learning processes.
* make resolution clear and as quick and fair as possible.

Staff will review the details of the situation and make the call on request for adjustment to behavior of any involved. If asked, they will write up the basic circumstances and the ruling on outcome at the time for later review. Copies are given to parties in the incident within 2 business days.
Immediate actions may include but are not restricted to:
* Discuss current policy and requirements with all the parties.
* Immediate training on safety or usage.
* Require actions of the person(s) such as cleaning up space, change specific behavior, remove items from the premises.
* temporary removal of person or persons from a piece of equipment or activity. Perhaps additional training or safety review is required before return to the equipment, or barred from the equipment reservation for a day. Repeat offenses may include a week, a month or more. There are no refunds for removal.
* temporary removal of person or persons from premises (facility or grounds) for the day. Perhaps review of the Ethics and Conduct with the General Manager is required for return. Repeat offenses may invoke a week, a month or more. There are no refunds for removal from the premise for cause.
Those who don't abide by the ruling can appeal, and are expected to conform to the ruling until appeal is complete.
Any appeals are required to be made in writing (email accepted) to the General Manager received within 2 business days.

Incidents will be reviewed by the General Manager within 3 business days.
The General Manager will review any associated appeals made within that time and may make adjustments to the requirements.
Changes will be notified to all involved, including staff members.
The General Manager will determine if any temporary removal from premises should be forwarded to the Board of Supervisors
for consideration of making a removal permanent.

The Board of Supervisors will review considerations for removal. They may discuss with the staff, General manager and persons in question and then make a ruling within 2 weeks. There is no membership refund for permanent removal from the premises, there is no re-application accepted for reconsideration in less than 1 year.

Incident tracking will be maintained for reference for at least 3 years.

Decisions should be reviewed periodically by the Board of Supervisors for larger issues, trends and improvements in the Ethics and Conduct as well as other policies.

Finally, a continued dispute or disagreement arising between the Member and Maker Nexus shall be resolved by arbitration in California before one arbitrator and arbitrated in accordance with the Commercial Arbitration Rules (the "Arbitration Rules") of the American Arbitration Association (the "AAA"), in effect on the date that such notice is given.

=Change to Ethics and Conduct=
The Board of Maker Nexus reserves the right to alter or amend the rules as it determines appropriate for the safety of Maker Nexus members.

=Glossary=
;deadnaming
:A deadname is the birth name of a person who has since changed their name (especially a transgender person). Deadnaming is refusing to call a person by their name, only by their deadname.

;facility or premises
: Any part of the building and grounds, inside, out and the parking lot. Some activities may by necessity and safety are outdoors.

; harrassment
:The act of systematic and/or continued unwanted and annoying actions of one party or a group, including threats and demands.

; equipment
: Something used to create or manipulate objects, be they software or hardware. This may include but not limited to: lathe, hammer, screwdrivers, sewing machines, scissors, pencils, tables, saws, and sandpaper. Some equipment may also be materials such as computers based on usage and intent.

; materials
: Something objects are made of, or used to manipulate characteristics of an object, be they software or hardware. This may include but not limited to: wood, metal, plastic, electric components, grit, sand, glue, paint, screws, and nails. Some materials may also be equipment such as sand or tables based on usage and intent.

; minors
: Persons under the age of 16.

== Signature ==

I HAVE READ, UNDERSTOOD AND AGREE TO COMPLY WITH ALL ASPECTS OF THE ETHICS AND CONDUCT RULES OF MAKER NEXUS.

Print Name:_____________________________________Age: _______ Signature:__________________________________________Date:____________

Print Guardian Name: _____________________________Guardian Signature: _____________________________________ Date:__________________

Sunbeam Steam Master Iron

2019-05-09T06:38:35Z

Sbaker: /* Materials, Tooling, Accessories */

[[File:full_image.jpg|400px|thumb|left|Sunbeam Steam Master Iron]]

== Description ==
Sunbeam Steam Master 1400 Watt Mid-size Anti-Drip Non-Stick Soleplate Iron with Variable Steam control and 8' Retractable Cord.

=== Classes ===
''TBW''

=== Specifications ===
* Vertical and Horizontal Steam Shot
* NonStick Soleplate
* 3 way Auto-off:
** Flat - 30 second
** Side - 30 second
** Base upright - 8 minute
* Dimensions: 6.18" H x 5.47"W x 11.88"D
* Weight: 2.79lb.
* Cord length: 8ft.

* ''Electrical spec: '' '''120VAC 1400W 60Hz'''

<div class="toccolours mw-collapsible mw-collapsed">

===MN Asset Details===
<div class="mw-collapsible-content">
[[File:Sunbeam_GCSBCL-202_Steam_Master_Iron_NamePlate_IMG_20190314_193711_reduced.jpg|300px|thumb|right|Sunbeam Steam Master Name Plate]]
*''Model Number: '' '''GCSBCL-202'''
*''Serial Number: '' '''177543'''
*''MN Asset Number: '' '''mnAN'''
<br clear="all">
</div></div>

==Safety Specifics==
{{AllSafetyRulesApply}}

* Use iron only for intended use.
* The iron is intended to rest on the 'heel', don't rest it on sides.
* Do not leave the iron on an unprotected surface while on.
* Turn off when not in use.
* Burn Hazard. Don't touch the soleplate when it's been on and for significant time afterwards to allow for cooling.
* Steam Burn Hazard. Take care when refilling a hot iron. Do not overfill beyond the maximum fill line.
* Don't put away until completely cool.

==Documentation==

[https://www.manualslib.com/manual/1455414/Sunbeam-Gcsbcl-202-033.html User Manual]

==Materials, Tooling, Accessories==
* Use the filtered water in the breakroom for the water for the iron. Please empty extra water afterwards.

==Settings==
[https://en.wikipedia.org/wiki/Ironing#Recommended_ironing_temperatures Recommended Ironing Temperatures]

==Tips & Tricks==
[https://www.sunbeam.com/blog/archive/categories/garment-care/ironing-hints-and-tips/ironing-hints-and-tips.html Sunbeam Ironing Hints and Tips]
* Read the label of the fabric so you know the temperature to use. When in doubt, use the lowest setting.
* Make sure your iron is clean before use.
* Use long straight strokes. Wiggling can stretch the fabric.
* Iron around decorative objects, zippers, buttons, sequins, glitter, fine lace.
* Avoid iron sheen by ironing the garment inside out.
* Use bobby pins to secure pleats.
* Hang or fold immediately after ironing.
* Iron down the center of sleeves instead of along the seam.
* Iron clean fabrics.
* Iron 100% cotton while it's damp.

Back to [[MN-S_Textiles]] Equipment List

Sunbeam Steam Master Iron

2019-05-06T04:18:02Z

Sbaker: /* Settings */

[[File:full_image.jpg|400px|thumb|left|Sunbeam Steam Master Iron]]

== Description ==
Sunbeam Steam Master 1400 Watt Mid-size Anti-Drip Non-Stick Soleplate Iron with Variable Steam control and 8' Retractable Cord.

=== Classes ===
''TBW''

=== Specifications ===
* Vertical and Horizontal Steam Shot
* NonStick Soleplate
* 3 way Auto-off:
** Flat - 30 second
** Side - 30 second
** Base upright - 8 minute
* Dimensions: 6.18" H x 5.47"W x 11.88"D
* Weight: 2.79lb.
* Cord length: 8ft.

* ''Electrical spec: '' '''120VAC 1400W 60Hz'''

<div class="toccolours mw-collapsible mw-collapsed">

===MN Asset Details===
<div class="mw-collapsible-content">
[[File:Sunbeam_GCSBCL-202_Steam_Master_Iron_NamePlate_IMG_20190314_193711_reduced.jpg|300px|thumb|right|Sunbeam Steam Master Name Plate]]
*''Model Number: '' '''GCSBCL-202'''
*''Serial Number: '' '''177543'''
*''MN Asset Number: '' '''mnAN'''
<br clear="all">
</div></div>

==Safety Specifics==
{{AllSafetyRulesApply}}

* Use iron only for intended use.
* The iron is intended to rest on the 'heel', don't rest it on sides.
* Do not leave the iron on an unprotected surface while on.
* Turn off when not in use.
* Burn Hazard. Don't touch the soleplate when it's been on and for significant time afterwards to allow for cooling.
* Steam Burn Hazard. Take care when refilling a hot iron. Do not overfill beyond the maximum fill line.
* Don't put away until completely cool.

==Documentation==

[https://www.manualslib.com/manual/1455414/Sunbeam-Gcsbcl-202-033.html User Manual]

==Materials, Tooling, Accessories==
* To avoid buildup, use distilled water when refilling.

==Settings==
[https://en.wikipedia.org/wiki/Ironing#Recommended_ironing_temperatures Recommended Ironing Temperatures]

==Tips & Tricks==
[https://www.sunbeam.com/blog/archive/categories/garment-care/ironing-hints-and-tips/ironing-hints-and-tips.html Sunbeam Ironing Hints and Tips]
* Read the label of the fabric so you know the temperature to use. When in doubt, use the lowest setting.
* Make sure your iron is clean before use.
* Use long straight strokes. Wiggling can stretch the fabric.
* Iron around decorative objects, zippers, buttons, sequins, glitter, fine lace.
* Avoid iron sheen by ironing the garment inside out.
* Use bobby pins to secure pleats.
* Hang or fold immediately after ironing.
* Iron down the center of sleeves instead of along the seam.
* Iron clean fabrics.
* Iron 100% cotton while it's damp.

Back to [[MN-S_Textiles]] Equipment List

Sunbeam Steam Master Iron

2019-05-06T04:15:45Z

Sbaker: /* Tips & Tricks */

[[File:full_image.jpg|400px|thumb|left|Sunbeam Steam Master Iron]]

== Description ==
Sunbeam Steam Master 1400 Watt Mid-size Anti-Drip Non-Stick Soleplate Iron with Variable Steam control and 8' Retractable Cord.

=== Classes ===
''TBW''

=== Specifications ===
* Vertical and Horizontal Steam Shot
* NonStick Soleplate
* 3 way Auto-off:
** Flat - 30 second
** Side - 30 second
** Base upright - 8 minute
* Dimensions: 6.18" H x 5.47"W x 11.88"D
* Weight: 2.79lb.
* Cord length: 8ft.

* ''Electrical spec: '' '''120VAC 1400W 60Hz'''

<div class="toccolours mw-collapsible mw-collapsed">

===MN Asset Details===
<div class="mw-collapsible-content">
[[File:Sunbeam_GCSBCL-202_Steam_Master_Iron_NamePlate_IMG_20190314_193711_reduced.jpg|300px|thumb|right|Sunbeam Steam Master Name Plate]]
*''Model Number: '' '''GCSBCL-202'''
*''Serial Number: '' '''177543'''
*''MN Asset Number: '' '''mnAN'''
<br clear="all">
</div></div>

==Safety Specifics==
{{AllSafetyRulesApply}}

* Use iron only for intended use.
* The iron is intended to rest on the 'heel', don't rest it on sides.
* Do not leave the iron on an unprotected surface while on.
* Turn off when not in use.
* Burn Hazard. Don't touch the soleplate when it's been on and for significant time afterwards to allow for cooling.
* Steam Burn Hazard. Take care when refilling a hot iron. Do not overfill beyond the maximum fill line.
* Don't put away until completely cool.

==Documentation==

[https://www.manualslib.com/manual/1455414/Sunbeam-Gcsbcl-202-033.html User Manual]

==Materials, Tooling, Accessories==
* To avoid buildup, use distilled water when refilling.

==Settings==
''TBW''

==Tips & Tricks==
[https://www.sunbeam.com/blog/archive/categories/garment-care/ironing-hints-and-tips/ironing-hints-and-tips.html Sunbeam Ironing Hints and Tips]
* Read the label of the fabric so you know the temperature to use. When in doubt, use the lowest setting.
* Make sure your iron is clean before use.
* Use long straight strokes. Wiggling can stretch the fabric.
* Iron around decorative objects, zippers, buttons, sequins, glitter, fine lace.
* Avoid iron sheen by ironing the garment inside out.
* Use bobby pins to secure pleats.
* Hang or fold immediately after ironing.
* Iron down the center of sleeves instead of along the seam.
* Iron clean fabrics.
* Iron 100% cotton while it's damp.

Back to [[MN-S_Textiles]] Equipment List

Sunbeam Steam Master Iron

2019-05-06T04:13:26Z

2019-05-06T02:15:44Z

Sbaker: /* Safety Specifics */

[[File:Barudan_cropped.jpeg|400px|thumb|left|BEVT Elite Pro II 15-Thread Embroidery Machine]]
<br clear="all">

== Description ==
[https://www.barudanamerica.com/ Barudan] single head machine, relatively simple for a professional system. Able to sew flats, caps and tubular goods.

=== Classes ===
''TBW''

=== Specifications ===
* LCD screen
* Radius Cylinder Arm
* Large Field Size
* 10 million stich capacity in 30 patters
* CF Card slot
* Standby function
* Automatic detection of top and bobbin thread breaks
* Embroidery Area: 330X500MM
* Cap Frame: 79x360mm
* Frames Max: 330x438mm
* Needles: 15
* Stitch Length: .1~12.7mm
* Speed: 1300

* ''Electrical spec: ''
::'''VOLT AC 100-240 V'''
::'''WATT 0.5 KW'''
::'''PHASE 1P &emsp; 50/60 HZ'''

<div class="toccolours mw-collapsible mw-collapsed">
===MN Asset Details===
<div class="mw-collapsible-content">
[[File:serialnumberplate.jpg|300px|thumb|right|toolname Serial Number Plate]]
* ''Location: '' '''where'''
* ''Model Number: '' '''BEVT-Z1501 CBII'''
* ''Serial Number: '' '''3117897G13'''
* ''MN Asset Number: '' '''mnAN'''
<br clear="all">
</div></div>

==Safety Specifics==
{{AllSafetyRulesApply}}

'''Embroidery Safety'''
* Operate only from the front. Do not load work to the machine from the back side.
* Do not operate without the protective covers for the shaft, pulley belt and gear in place.
* No long necklaces, bracelets near the working machine.
* One person at a time should work the machine.

{{SewingMachineSafety}}

==Documentation==
[http://barudan.fr/wp-content/uploads/2014/07/BEVT_Instruction_Manual_EN.pdf Instruction Manual]

[https://www.barudanamerica.com/wp-content/uploads/2018/11/EliteProIILubrication.pdf Lubrication Instructions]

[https://www.barudanamerica.com/wp-content/uploads/2018/11/FZ0MR31-BEVT-Z1501CBII.pdf Parts List]

==Materials, Tooling, Accessories==
''TBW''

==Settings==
''TBW''

==Software==
''TBW''

==Tips & Tricks==
''TBW''

Back to [[MN-S Textiles]] Equipment List

Barudan BEVT Elite Pro II 15-Thread Embroidery Machine

2019-05-06T02:11:31Z

Sbaker: /* Description */

Barudan BEVT Elite Pro II 15-Thread Embroidery Machine

2019-05-06T02:10:42Z

Sbaker: /* Description */

Barudan BEVT Elite Pro II 15-Thread Embroidery Machine

2019-05-06T02:00:59Z

Sbaker: /* Safety Specifics */

[[File:Barudan_cropped.jpeg|400px|thumb|left|BEVT Elite Pro II 15-Thread Embroidery Machine]]
<br clear="all">

== Description ==
''TBW''

=== Classes ===
''TBW''

=== Specifications ===
''TBW''

* ''Electrical spec: ''
::'''VOLT AC 100-240 V'''
::'''WATT 0.5 KW'''
::'''PHASE 1P &emsp; 50/60 HZ'''

<div class="toccolours mw-collapsible mw-collapsed">
===MN Asset Details===
<div class="mw-collapsible-content">
[[File:serialnumberplate.jpg|300px|thumb|right|toolname Serial Number Plate]]
* ''Location: '' '''where'''
* ''Model Number: '' '''BEVT-Z1501 CBII'''
* ''Serial Number: '' '''3117897G13'''
* ''MN Asset Number: '' '''mnAN'''
<br clear="all">
</div></div>

==Safety Specifics==
{{AllSafetyRulesApply}}
{{SewingMachineSafety}}

==Documentation==
[http://barudan.fr/wp-content/uploads/2014/07/BEVT_Instruction_Manual_EN.pdf Instruction Manual]

[https://www.barudanamerica.com/wp-content/uploads/2018/11/EliteProIILubrication.pdf Lubrication Instructions]

[https://www.barudanamerica.com/wp-content/uploads/2018/11/FZ0MR31-BEVT-Z1501CBII.pdf Parts List]

==Materials, Tooling, Accessories==
''TBW''

==Settings==
''TBW''

==Software==
''TBW''

==Tips & Tricks==
''TBW''

Back to [[MN-S Textiles]] Equipment List