Objective Scope - MICROmega Home

1 Objective This policy stipulates the guidelines regarding the personal use of Information Technology (IT) within the MICRO mega Group Scope This policy applies to all Subsidiaries of the MICRO mega Group. Reference This policy refers to the MICRO mega Group Procurement Policy. Policy Item Policy Description General All company IT assets must be treated with respect and professionalism. All staff must sign this IT policy to acknowledge that they have read and understood its contents. E-mail E-mail should be used primarily for business purposes.

2 The misuse of email can post many legal, privacy and security risks and it is therefore important for users to understand its appropriate use. The following e-mail activities are strictly prohibited: Sending unsolicited messages, including the sending of "junk mail" or other advertising material to individuals who did not specifically request such material (email spam);. Any form of harassment, whether through language, frequency or size of messages;. Sending of confidential Subsidiary information to an unauthorized third party without the proper authority or approval.

3 Software and Software piracy hardware It is a company policy to not use pirated software on any computers. principles All computers must have the appropriate software licenses in place and this information must be available for audit when requested. Games It is a company policy that no computer games be installed or played on Subsidiary owned computer systems, whether during work hours or after hours. Installing and/or downloading Software You may not download or install software onto a computer or onto the network without the proper authority or permission of the System Administrator.

4 Installing computer related hardware You may not install hardware wit hin the net work without permission from the System Administrator. Devices such as wireless access points, storage devices and network hardware are specif ically disallowed as they may present a security risk or impede operations. Viruses The threat of a virus infection can arise from downloading files from the Internet, clicking links on websites, loading data into your computer from an external source, or opening an e-mail attachment. These threats are often targeted (may use your name) and may look like they come from someone you know (spoofing).

5 Always take care when accessing any information from an external source, even when the source may seem legitimate Policy Item Policy Description Data backup All company data needs to be saved or synchronized to a company server or to the Cloud to ensure that no data is lost in the event of a disaster, crash or loss. If you are unsure of this process it is your responsibility to find out. Passwords All staff must ensure that they use strong passwords (8 or more characters, alpha-numeric). It is a company policy that no passwords may be shared between staff members for any reason whatsoever.

6 Passwords must not be written down, placed in an unsafe place or saved onto a computer in any form whatsoever. Internet The use of the Internet for personal purposes during business hours is allowed but must not interfere with normal work duties and must be limited to tea and lunch breaks. Such activity is limited to browsing and messaging and must not utilize undue bandwidth. The Subsidiary reserves the right to monitor any Internet activity from any staff member and may take the appropriate disciplinary action if the resource has been found to be abused.

7 The posting, uploading, or downloading of pornographic or illegal messages, photos, images, sound files, text files, video files, newsletters, or related materials is strictly prohibited and will lead to immediate dismissal. Laptop Any company-issued devices must be carried in an appropriate carry-bag and the necessary precautions taken to keep the asset safe from harm. Any devices should be locked away in an appropriate place when left alone (in the boot of a car, out of sight or in a cupboard with a lock). Any unacceptable levels of damage to a laptop will be evaluated by management and MMG reserves the right to deduct an amount deemed appropriate and agreed with the staff member or Subsidiary MD from their salary to cover the cost of the repair or replacement.

8 Any procurement activities related to computers must adhere to the provisions as set out in the MICRO mega Group Procedure Procurement policy. * It is the responsibility of the Policy Owner to communicate and monitor compliance of this policy to all existing and new Subsidiary MDs on at least an annual basis. Governance and Implementation * It is the responsibility of the Subsidiary MDs to communicate and monitor compliance of this policy to all affected parties in their respective Subsidiaries on at least an annual basis.

9 * This policy can be reviewed and amended at the discretion of the Board of Directors of MICRO mega Holdings Limited. I, _____ acknowledge that I have read and understood the MICRO mega Group Policy and that I will adhere to the provisions stipulated herein. Employee Name _____ Employee Signature _____. Date _____.