Device Security Policy
Device Security Policy Overview This Device Security Policy sets the minimum security requirements for all devices—whether assigned to human users or operated by non-human identities (such as bots, APIs, or automated systems)—that access company systems, networks, or data. The policy aims to protect organizational resources against loss, theft, or compromise, and to support regulatory and business requirements. Scope This policy applies to all company-owned, personally owned (BYOD), or third-party devices used to access company systems or data, including but not limited to laptops, desktops, smartphones, tablets, servers, IoT devices, and devices used by non-human identities (e....