SECURITY GUIDELINES FOR CONSULTANTS
This document provides guidelines regarding standards of conduct and integrity that are expected while
assigned to perform work on behalf of Avaya. It does not address every situation or set forth every ruleand does not attempt to substitute the exercise of good judgment. Any specific questions regardingthese standards should be addressed to Avaya Security.
ID Badges/Electronic Access Cards:•••••

Photo ID Badges which may be issued must
be continuously worn and visibly displayed atall times when working in Avayaowned/controlled locations.
In connection with performing work onbehalf of Avaya, you may be issued an
Electronic Access card or an ID Badge
credential combined with an electronic
access card to be used for gaining admittanceto Avaya facilities.
These cards may not be lent to anyone orused to assist another person to enter any
Avaya controlled area or building.
Lost ID Badges/Access Cards must be
immediately reported to badge@avaya.com.
These cards and badges are the property ofAvaya and must be returned the day yourassignment to Avaya ends, or immediately
upon Avaya’s request.

Property Use and Removal:•••••

No property may be removed from Avaya
owned/managed premises without written
authorization from Avaya Security. The local
Property Removal Procedure must be
followed which provides a record of persons
removing property.
“Scrap” or waste materials are Avaya
property and may not be removed under any
circumstances.
Avaya has the right to have its authorized
security personnel conduct package
inspections of items which might reasonably
be expected to be used for carrying Avaya
property.
All property must be returned immediately
upon Avaya’s request.
Avaya property and/or resources can only be
used in the performance of the services
covered by your or your employer’s contractwith Avaya.

Access of Avaya Computer Systems, Data
Networks or any Avaya Computerized
Resources:
••

•

•

In the course of providing your services toAvaya, if you are provided access to any
Avaya computer systems, you are required toprotect that access using the establishedsystem of passwords. Passwords may not beshared with anyone, and reasonablemeasures should be used to protect them.
You are prohibited from letting any otherindividual use your account for accessing theAvaya network.
Computer and Network resources areexclusively for Avaya business purposes.
Non-Avaya business use or personal use isstrictly prohibited.
Unauthorized access, loss, damage, theft or
misuse of computerized or network resourcesmust be reported to Avaya Corporate
Security on 1-877-993-8442 or 908-953-7276
prompt 5.

Treatment and Respect for others while
assigned to Avaya:•••

The Avaya work environment shall at alltimes be free from discrimination based on
race, color, religion, national origin, sex, age,disability, sexual preference or orientation,
marital status, or any unlawful factor.
All laws and regulations shall be strictlycomplied with.
Avaya will not permit any conduct thatcreates an intimidating or offensive work
environment. This includes, but is not limited
to racist, sexist, ethnic, or homophobiccomments or jokes; sexual advances,inappropriate physical contact; or sexuallyoriented gestures, pictures, jokes orstatements.

Parking and Vehicle Operation:••

All parking and local speed limit regulations
shall be followed when operating a vehicle on
Avaya owned or controlled properties.
If you operate a motorized vehicle as anormal part of your work assignment atAvaya, you may be provided with special
training/rules which must be followed.

Personal Behavior Standards/Conduct which is
specifically prohibited:••••

Potential Business Conflicts:
Unless specifically stated in your or your employer’s
contract with Avaya, during the hours you are
performing services for Avaya, you are prohibitedfrom marketing or selling any products or services toAvaya or others.

Reporting Security Related Incidents andViolations of this Document:
Security incidents while assigned to Avaya must bereported to 1-877-993-8442 or 908-953-7276.

Vendor System Security Requirements:
••
•

••

•
•

•

In the course of providing your services toAvaya, these requirements apply to any
system/device (desktops, laptops, and othermobile devices) accessing Avaya or Avaya
Customer’s network or data.
You must comply with Avaya policies in
addition to TOM’s requirements (if executed).
The system must be running an OS that is still
supported (with updates and patches) by theOS vendor.
The system must have a supported andregularly updated firewall installed.
The system must be running an Antivirus/anti-malware solution that is current
and regularly updated.
The system must be receiving auto updates.
The system must have hard-disk encryption
enabled.
The system must have a screen-lockout of no
more than 20 minutes.

Theft, neglect or abuse of Avaya property.
Possession of a firearm (even if unloaded).
Fighting, gambling, possession of narcotics orillegal substances.
Consumption, or being under the influence of
intoxicating beverages or illicit drugs orsubstances.
Use of Avaya resources for personal gain.
Any illegal activity.

•Protecting Avaya’s Information:••

You are bound to protect Avaya’s proprietary
information in a manner consistent with
Avaya’s policies as stated in the contract
between Avaya and you or your employer.
Compromise or loss of Avaya’s intellectual
property assets must be reported to 1-877993-8442 or 908-953-7276.

Safety and Environmental Conditions:
While assigned to Avaya, you may be provided withmaterial or have occasion to view video tapes
regarding safety and environmental health matters. All
local safety rules and regulations must be followed.
Incidents must be reported per local procedures.