|
Executive
Summary:
Document Text:
CF/AI/2004-010
To: All Regional Directors, IT
Officers
Representatives and Assistant
Representatives
Heads of Office
(Geneva, Copenhagen, Tokyo, Florence)
Division Directors, NYHQ
From: Toshiyuki
Niwa
Deputy Executive
Director
Subject
The policy on IT
software systems acquisition and certification
In the past, staff have freely installed computer
software on UNICEF’s IT infrastructure with little or no consideration to
security, compatibility or the overall impact on network performance.
UNICEF Information Security Policy and
related Code of Conduct (Please refer
to CF/EXD/2003-023) reinforces the need for clear guidelines and a
process to acquire and classify software suitable for organizational
use.
In its efforts to maximise
the returns of UNICEF’s IT resources, the IT Division has instituted a
system to vet and classify all software procured for organizational use. A
set of guidelines to help users select such software is also included. We
have also taken into consideration, situations where deviations from the
established standards may be possible. The attached policy document,
UNICEF’s Software Classification and
Certification Policy, outlines this
and the related procedures.
I urge
all staff to review this document carefully, taking special note of the
process and steps necessary to certify software for organizational use. I
wish to emphasize that installing freeware, shareware, games, commercial
demo software, etc. on UNICEF’s equipment have significantly impacted IT
security, network performance, and the IT Help Desk’s ability to
troubleshoot, diagnose or fix problems in a timely manner. Henceforth, ITD
will address bug fixes, troubleshoot software and hardware problems, or
escalate to the appropriate manufacturer only when the system in question
is certified and
supported. In addition, only globally
certified and supported software can be purchased (Please refer
to CF/SD/2004-003).
At the time
of the issuance of this memorandum, ITD has compiled the list of software
that will be globally certified. All Regional IT Officers have also been
compiling their “to be locally certified” lists. These lists will be
reviewed and officially ratified by the IT Architecture Board, including
terms and conditions appropriate to locally certified software. Once
ratified, they will be published on the UNICEF
intranet.
Please share this policy
paper with all staff in your office.
Thank you for your cooperation.
Attachment: Software Classification and Certification
Policy
Update: The complete list of Globally Certified Software and software certified for
HQ use only (as of June 7) has been
posted above for your review.
A new list of Additional certified software, as of March 18,
2005 has been posted above. Please
ensure that all staff are familiar with with these
lists.
|
|