Customer Documents Protection
Customer Documents Protection
When working on ML project, the team has to deal with sensitive data of the clients needed for data analysis, model training or support.
When working directly from the client’s office, Data Analyst can be provided by the company’s laptop which will have all the necessary programs already pre-installed.
When using the company's laptop, you should prepare a list of software you may need on the project for approval before the start of the project. All additional tools/programs you may need in the course of work MUST be agreed upon with the customer.
It's not permissible to:
- Use any memory sticks, discs or any other devices to copy information to/from the customer’s computer
- Send any piece of a customer’s information (even if it doesn’t contain any sensitive data) outside, where it can be accessed by non-engaged parties (even to yourself — to your private email, your colleague/DM) without mentioning it to somebody from the customer’s side
- Take any photos of customer’s laptop screen
- Bring customer’s computer out of the customer's premises without explicit approval by customer
It's also possible that the work will be organized with use of VDI. In this case it’s not permissible to install any software on a customer's VDI without approval.
It's not permissible to:
- Share your credentials — when first installing VDI, you’re provided with different logins, security keys, passwords etc. that shouldn't be shared with anybody
- Send/receive any attachments with a customer's information from/to your personal accounts. To share information with the team engaged in the project, create a mailbox on VDI or a ShareFolder where all the necessary information will be stored. In the very beginning you should notify a customer that no sensitive data should be sent to your private email. Everything related to the project can be provided ONLY by sending to the project email on VDI or by putting to the ShareFolder.
- Copy any piece of a customer's information (including screenshots of VDI) on your local machine
* VDI: Virtual desktop infrastructure is virtualization technology that hosts a desktop operating system on a centralized server in a data center.