By signing in, you agree to comply with this Acceptable Use Policy when accessing or using SSAFA systems, devices, and services.

• Organisation-provided identifiers and authentication secrets, including corporate email addresses, passwords, and MFA details, must be protected and must not be shared. They must also not be reused inappropriately or exposed when creating or accessing services.

• When using social media or social networking sites, personal views must be expressed using personal accounts, and no individual may represent or speak on behalf of SSAFA without prior approval from the Public Relations team or the Director of Marketing and Communications.

• Only IT-approved tools, apps and services may be used, including social media or social networking on behalf of SSAFA, and only within SSAFA-approved organisational instances. Any tools, apps or services used outside these approved instances or without IT involvement are not authorised and are subject to withdrawal from use with no notice.

• SSAFA information must not be posted, shared, or disclosed on public or external platforms unless explicitly authorised.

• SSAFA duties should be carried out from secure, private locations wherever possible, and reasonable precautions must be taken to reduce the risk of confidentiality, privacy, or security being compromised. Individuals who work with data owned by SSAFA Family Health Services must not work in public spaces.

• Follow clear desk and clear screen best-practices, ensuring information is not visible or accessible to unauthorised individuals and locking screens when unattended.

• Handle, transport, and protect SSAFA physical assets and information securely when working outside office environments, including during travel and storage.

• Use of collaborative computing devices when connected to, provided by, or used as part of SSAFA systems or services including remote activation or access (for example, meeting room cameras, microphones, or similar devices) must be limited to authorised SSAFA business purposes and carried out in a manner that maintains confidentiality, privacy, and security.