Conversation
|
From #8
|
Updated project description to clarify the source of learning outcomes and the nature of the training courses.
grugnog
left a comment
grugnog
left a comment
There was a problem hiding this comment.
Only about half way through, but figured I should share what I have - lots of feedback, but actually I think the training is really good - very clear and concise, just a few factual things to fix :)
| - **Auto-lock** — your screen locks automatically after a short idle period | ||
| - **Automatic patching** — your OS and security software stay up to date | ||
|
|
||
| > **Important:** You must use your CivicActions-managed laptop for all work involving Internal, Confidential, or client data. Personal (BYOD) mobile devices can only be used for MFA prompts and communication apps — and even then, they need an MDM profile for isolation. |
There was a problem hiding this comment.
I don't think people will know what BYOD or MDM profile means - for the latter we can say something like "a mobile device may require specific security settings as part of login".
There was a problem hiding this comment.
Quite a few uses of MDM elsewhere also
| - **Never use personal accounts** (like a personal Gmail) for CivicActions work | ||
| - CivicActions uses a `firstname.lastname@civicactions.com` naming convention — IT sets this up when you onboard. If your name matches someone else's, IT adds a middle initial or variation. | ||
|
|
||
| > **Example:** When you join, PeopleOps verifies your identity through Rippling. IT then creates your Google Workspace account, assigns you to the right groups and Slack channels, and issues your YubiKey — all before your first day. |
There was a problem hiding this comment.
places an order for your CivicActions laptop... is this true?
2 participants
📝 Six trainings covering the 193 outcomes from the 17 information Security related Policies
This creates a new CP-Policies sub-folder with the six policy trainings
LiaScript course files (one README.md per training) with quizzes, ready for review and delivery:
📖 Description
A brief summary of the purpose and scope of this pull request. What problem does it solve or improve? Why is it needed now?
🔧 Type of Change
✅ Tasks to Complete
Peer review :
👀 Review Checklist
🚀 Deployment Notes
Currently in draft state. Text for Trainings 1 and 2 is complete but not peer reviewed
Do we want to keep the CP-Policy sub-folder?