Effective Date: 02 June 2025
Applies To: All employees, contractors, and third parties accessing MPLATS’ IT systems
1. PURPOSE
This policy outlines acceptable and unacceptable use of Mototolo Platinum Mine’s information technology systems, including hardware, software, networks, internet access, and data handling. It ensures confidentiality, integrity, security, and operational continuity of digital assets.
2. SCOPE
This policy applies to all users of IT resources provided or managed by MPLATS ENTERPRISE (PTY) LTD, including:
-
Company-issued devices (laptops, desktops, mobile phones)
-
Network and internet access
-
Email and communication platforms
-
Cloud services and third-party applications
-
USBs and removable media
3. ACCEPTABLE USE
Users are permitted and encouraged to use IT resources for:
-
Conducting official business duties
-
Accessing work-related applications and platforms
-
Email and communications with clients, partners, and internal teams
-
Accessing knowledge bases, online training, or regulatory portals
4. UNACCEPTABLE USE
Users may NOT use company IT systems for:
-
Accessing, downloading, or distributing offensive, obscene, or illegal content
-
Unauthorized software installation or use of unlicensed software
-
Transmitting confidential data via unsecured methods
-
Personal gain or commercial activity unrelated to MPLATS
-
Circumventing security controls (e.g., firewalls, passwords)
-
Sharing credentials or logging in on behalf of others
-
Social media use unrelated to work, unless authorized
-
Use of anonymous proxies, dark web access, or torrent sites
5. EMAIL & INTERNET USAGE
-
Business email must be used for official communication only
-
Avoid opening unknown attachments or clicking suspicious links
-
No forwarding of sensitive internal documents to personal email accounts
-
Internet browsing should be work-related and moderate in bandwidth usage
6. PASSWORD SECURITY
-
Passwords must be strong (minimum 8 characters, alphanumeric & symbols)
-
Never share or write down passwords
-
Change passwords regularly (every 90 days recommended)
-
Use company-approved password managers if provided
7. DEVICE SECURITY
-
All devices must be password-protected and locked when unattended
-
Loss or theft of devices must be reported immediately to IT
-
Installation of antivirus and endpoint security is mandatory
-
Company data on mobile devices must be encrypted and subject to remote wipe if lost
8. DATA PRIVACY & CONFIDENTIALITY
-
Treat all MPLATS and third-party data as confidential unless explicitly stated
-
Respect the Protection of Personal Information Act (POPIA)
-
Unauthorized copying, emailing, or uploading of company data is prohibited
9. MONITORING & ENFORCEMENT
-
All activity on MPLATS systems may be logged and monitored
-
Employees have no expectation of privacy when using company systems
-
Violations of this policy may lead to disciplinary action, including termination
10. POLICY VIOLATIONS
Non-compliance may result in:
-
Loss of access to IT systems
-
Formal disciplinary procedures
-
Legal action if laws are breached (e.g., data theft, hacking)
11. ACKNOWLEDGMENT
All users must sign an IT Acceptable Use Acknowledgment Form before accessing systems. Continuous access implies consent to this policy.
Contact for Queries or Reporting:
IT & Systems Manager
Email: it.support@mplats.co.za
Tel: 013 516 0549