Line 30: |
Line 30: |
| |Employee has an office but works from somewhere else. | | |Employee has an office but works from somewhere else. |
| |} | | |} |
| + | ==Duty to Document== |
| + | Under the [https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=32601 Directive on Service and Digital], employees are '''required''' to document their activities and <u>decisions of business value</u>. If any activities or decisions of business value are made while using department-approved or public cloud tools, then these must be captured (e.g., in a Word document) and saved in a departmental corporate repository (e.g., GCdocs) as soon as possible. |
| + | |
| + | For more information, click [https://www.canada.ca/en/government/publicservice/covid-19/managing-government-information-working-remotely.html here]. |
| | | |
| ==Threats and Challenges posed by Remote Working== | | ==Threats and Challenges posed by Remote Working== |
Line 111: |
Line 115: |
| | | |
| Another issue with Hangouts is that it does not feature "end-to-end" encryption. In simple terms, it is only encrypted when it is being sent. This opens the door for eavesdropping on chats as well as Google having visibility on messages. | | Another issue with Hangouts is that it does not feature "end-to-end" encryption. In simple terms, it is only encrypted when it is being sent. This opens the door for eavesdropping on chats as well as Google having visibility on messages. |
| + | |
| + | ===Cisco Webex=== |
| + | Cisco Webex is the official enterprise teleconferencing solution for the Government of Canada offering dial-in call, video teleconferencing and messaging services across smartphones, tablets, and laptops. It is maintained by Cisco and supported by departments within the government for a more tailored solution. Although approved for use, best practices should be followed as if Cisco Webex was a non-managed third party app. It is important to remember that Cisco Webex is for UNCLASSIFIED use only. Some best practices when using Cisco Webex include: |
| + | |
| + | *Not sharing PIN with those outside the meeting invite list. |
| + | *Set the room to lock when the meeting starts. This feature enables you to screen users that are requesting to join when the meeting starts. |
| + | *Require an account to be used with Webex. |
| + | *Accounts should be protected with a strong password/passphrase and two-factor authentication. |
| + | *Secure meetings with strong PIN/Password. |
| + | *Use entry/exit tone and announce name features. |
| + | *Avoid using the "Share Screen" feature. Instead, use "Share Application". |
| + | |
| + | ==Questions and Contact Information== |
| + | For questions and other enquiries please email [mailto:ZZTBSCYBERS@tbs-sct.gc.ca TBS-Cyber Security]. |
| | | |
| == References == | | == References == |
Line 120: |
Line 138: |
| *[https://wiki.gccollab.ca/images/2/28/Guidance_for_the_Secure_Use_of_Collaboration_Tools.pdf Guidance For the Secure Use of Collaboration Tools - TBS] | | *[https://wiki.gccollab.ca/images/2/28/Guidance_for_the_Secure_Use_of_Collaboration_Tools.pdf Guidance For the Secure Use of Collaboration Tools - TBS] |
| *[https://wiki.gccollab.ca/images/4/4e/Orientation_sur_la_facilitation_de_l%E2%80%99acc%C3%A8s_aux_services_Web.pdf Orientation sur la facilitation de l’accès aux services Web - SCT] | | *[https://wiki.gccollab.ca/images/4/4e/Orientation_sur_la_facilitation_de_l%E2%80%99acc%C3%A8s_aux_services_Web.pdf Orientation sur la facilitation de l’accès aux services Web - SCT] |
| + | *[https://www.cisa.gov/sites/default/files/publications/CISA_Video_Conferencing_Tips_S508C.pdf Video Conferencing Tips - CISA] |
| ===Collaborative Tool References=== | | ===Collaborative Tool References=== |
| *[https://onezero.medium.com/slack-zoom-google-hangouts-are-your-remote-work-apps-spying-on-you-cf1e33809cf7 Slack, Zoom, Google Hangouts: Are Your Remote Work Apps Spying on You?] | | *[https://onezero.medium.com/slack-zoom-google-hangouts-are-your-remote-work-apps-spying-on-you-cf1e33809cf7 Slack, Zoom, Google Hangouts: Are Your Remote Work Apps Spying on You?] |