Software Installation Policy

Allowing employees to install software on organization computing devices opens the organization up to unnecessary exposure. Conflicting file versions or Dynamically Linked Libraries (DLLs) which can prevent programs from running, the introduction of malware from infected installation software, unlicensed software which could be discovered during audit, and programs which can be used to hack the organization’s network are examples of the problems that can be introduced when employees install software on organization equipment. Therefore your organization should have a system administrator to deploy software.

The purpose of this policy is to outline the requirements around installation software on the Diocese of Paterson computing devices. To minimize the risk of loss of program functionality, the exposure of sensitive information contained within Diocese of Paterson’s computing network, the risk of introducing malware, and the legal exposure of running unlicensed software. Finally, ransomware as well as other malware have been detected on unverified programs which can cause serious operation and financial loss.

This policy applies to all the Diocese of Paterson’s employees, contractors, vendors and agents with the Diocese of Paterson’s owned devices. This policy covers all computers, servers, smartphones, tablets and other computing devices owned by and/or operating within the Diocese of Paterson.

• 4.1 Employees may not install software on Diocese of Paterson’s computing devices operated within the Diocese of Paterson’s network.
• 4.2 Software requests must first be approved by the requester’s manager and then be made to the Information Technology department or your system administrator via email.
• 4.3 Software must be selected from an approved software list, maintained by the Information Technology department, unless no selection on the list meets the requester’s need.
  • 4.3.1 Approved software lists can be found on https://www.techsoup.org/get-product-donations
• 4.4 The Information Technology Department or your local system administrator will obtain and track the licenses, test new software for conflict and compatibility, and perform the installation.

• 5.1 Compliance Measurement
  The DoP Technology team may verify compliance to this Standard through various methods, including but not limited to, business tool reports, internal and external audits, and feedback to the Standard owner.
• 5.2 Exceptions
  All devices should be compliant with cyber insurance standards and local/federal governance standards. Any exception/outliers should be approved by the DoP Technology team in advance.
• 5.3 Non-Compliance
  An employee found to have violated this Standard may be subject to disciplinary action, up to and including termination of employment.

• 6.1 Techsoup

None