Acceptable Use of Assets Policy

Acceptable Use of Assets Policy

Document Name: Acceptable Use of Assets Policy
Version: 1.0
Approved by: Directors, Immercial Limited
Review Frequency: Annual or upon material change

Immercial’s information, devices, software, cloud services, accounts and other business assets must be used only for authorised business purposes and in accordance with applicable policies, contracts and legal requirements.

Users must:

• protect accounts and credentials and use MFA where available;
• access only information and systems needed for their authorised role;
• use approved devices, software and cloud services;
• protect confidential, personal and client information;
• keep devices secure and apply available security updates;
• report loss, misuse, suspected compromise or security incidents promptly;
• avoid unlawful, offensive, fraudulent or unauthorised activity;
• avoid installing unapproved software or bypassing security controls;
• exercise professional judgement and verify automated or AI-generated outputs before use.

Business information must be stored in approved Immercial systems and must not be transferred to personal accounts or unauthorised services.

When employment, appointment, access or an engagement ends, all Immercial and client assets must be returned or securely deleted as directed, and associated accounts and access permissions must be removed promptly.

The Directors approve and oversee this policy. It is communicated to relevant personnel and external parties where applicable and reviewed annually and following significant change.