CES

Work from Home Policy

Limited

Work from Home Policy

Version 1.0

REVISION HISTORY

Version Release Created/Revised Approved By Description of Remarks

Date By the Revision
1.0 10/01/2020 Corporate Quality Sr.Management Initial version -

CES_ISMS_POL _WFH Internal to CES Page 1 of 5

CES_ISMS_POL _WFH Internal to CES Page 2 of 5
 CES
Work from Home Policy
Limited

Purpose

The purpose of this policy is to create awareness, outline requirements and compliance to the
organizational policies for its employees during Work from Home. CES shall ensure that both
employees and the organization are benefited from these arrangements in case of any emergencies
or exigencies including natural calamities and pandemic outbreaks.

Scope

This scope of this policy applies to all employees whose primary work location is at our offices
located globally and are using the work from home privilege and or arrangements provided by the
organization.

Policy elements

CES employees should understand that Work from Home is a temporary agreement between
employees and the organization or its clients as mutually agreed upon. The employees’s respective
Reporting Managers shall approve to work from home for period that is as directed or as mutually
agreed between the Employees, CES or its Clients.

Principles of Work from Home

In order to ensure that employee work commitments, performance and quality of work is not
compromised during Work from Home, below are the norms for employees:

● Choose a quiet and distraction-free working space

● Specify the Work timings and obtain acceptance of their reporting Manager and clients
● Specify availability post Working Hours in case of any other emergencies or coordination
● Have an internet connection that’s adequate for their job
● Dedicating full attention to the job duties during working hours.
● Adhere to break and attendance schedules agreed upon with the manager
● Ensure the schedules overlap with those of the team members for as long as it is necessary to
complete the job duties effectively.

Team members and managers should determine long-term and short-term goals.
They should frequently meet (either online or in-person when possible) to discuss progress and
results.
 CES
Work from Home Policy
Limited

Equipment Protection and Safeguards

CES shall provide employees with equipment that is essential to their job duties, like laptops,
headsets and cell phones (when applicable.) to enable them to Work from Home or Remote Working.

CES Employees shall ensure the equipment that is provided is kept safe and secured from all
damages and avoid any misuse. Specifically, employees must:

● Keep their equipment password protected

● Store equipment in a safe and clean space when not in use.
● Follow all equipment protection guidelines
● Keep the Equipment Security Settings and Safety Standards intact.
● Not move the equipment from the accepted and designated address agreed for Work from Home
without the organizations consent.

Compliance to Policies

CES employees under Work from Home policy must comply company’s policies as listed (but not
limited to) are:

Information Security Policies:

As CES is an ISO 27001 (International standard for information Security) certified organization,
Employees shall by all times be abide and comply to the below policies and controls during their
Remote Working / Work from Home / Telecommuting with the organization or its clients.

1) CES Acceptable Usage Policy:

i) Safeguard the Equipment provided for Work from Home needs at all conditions.
ii) Protect from misuse by anybody including immediate family members
iii) Return the CES Equipment in the acceptable return conditions.

2) Antivirus Policy

i) Ensure that Antivirus software in their systems is always up-to-date and shall not change
the settings
ii) Run CES provided Antivirus periodically and reboot the systems upon updating with latest
upgrades
iii) Refrain from downloading freeware’s, open source software’s or components, unauthorized
or illegal software’s, etc
 CES
Work from Home Policy
Limited

3) Password Policy:

i) Ensure their Equipment Passwords and or any officially provided Passwords are NOT
COMPROMISED or shared.
ii) Change password as prompted by the system / equipment and keep them updating

4) Secure log-on procedures:

i) Use secured mechanisms to log into CES Network i.e thru CES or its client provided VPN’s
with authentications as required
ii) Safe Guard the RSA Tokens / Key Devices and Soft Keys at all times and return them
promptly in Acceptable Condition
iii) Report any failures or authentications immediately to their Reporting Managers
iv) Be vigilant at all time on any suspicious or malicious activity on their equipment and report
immediately to their respective manager and to Tech Support teams.

Data Security and Protection Policy

i) Shall ensure protection of all Sensitive Data if being used from any or all kinds of breach at
all times
ii) Not store any Client provided / critical / sensitive data on their equipment being provided for
Work from Home / Telecommuting / Remote Working arrangements
iii) Do Not Store any form of Code including source code in Laptops / Desktops
provided for Work from Home
iv) Do not Copy or Store any form of Code including the Software Source code to any
Storage Media including External Storage Devices, Online or Cloud Storage or email
accounts storage, etc
v) Shall store and protect the Client provided / Critical / Sensitive Data in CES repositories
such as file server / NAS Storage / Cloud Storage with required protection controls
vi) Obtain authorize access for all or any Client provided / Critical / Sensitive Data which is
stored in CES file server / NAS Storage / Cloud Storage with required protection controls
vii) Shall ensure the Client provided / Critical / Sensitive Data is Not Copied / Reproduced or
Replicated in any means or formats
viii) Shall ensure authorized archival or destruction as instructed by CES Compliance team or
Leadership Team
ix) Abide by the disciplinary process in case of any breach to any or all of the above policies.

Employee Code of Conduct:

All times including during Work from Home all CES employees shall comply with the elements
mentioned under the Employee Code of Conduct signed by them during the Joining formalities.
 CES
Work from Home Policy
Limited

Non-Disclosure Agreement

i) Comply to the CES NDA signed by the Employee and Shall Not Disclose or Divulge in
leakage of information to any 3rd parties
ii) Ensure the Confidentiality and Integrity is maintained at all time for the information provided
to them
iii) Put appropriate safeguards and controls for all Sensitive Information
iv) Shall not use or disclose sensitive information for their personal benefits.

Proprietorship, Copy Rights, Trade Marks, Intellectual Property:

i) Employees understand the Term and Definition of Intellectual Property as defined, stated
and accepted in the NDA signed by them
ii) Employees shall use any of the Copy Rights, Trademarks, Intellectual property provided to
them by CES or its Clients as per the agreements made
iii) Employees shall safeguard and protect the Copy Rights, Trademarks, Intellectual property
provided to them by CES or its Clients at all time while telecommuting/work from
home/remote working with all controls as prescribed or imposed by CES
iv) Employees understand that during their term of employment and during the Work from
Home any output created directly or indirectly shall be the Proprietorship and Intellectual
Property of CES
v) Any unauthorized disclosure, usage, or storage shall result in Disciplinary Actions including
Legal Actions as applicable and as decided by CES as an Organization.

Incidence Management and Reporting

Employees shall responsibly report any Incidences identified or observed during their Work
from Home thru mail to incidence@cesltd.com and communicate to his / her
Reporting Manager

By reading the above, CES employee(s) accepts and acknowledges that he /she is made
aware, understands and complies to all the Policies of CES including this Work from Home
Policy.

Employee Name : Date of Acceptance:

Employee ID : Signature: