The second half of the Technology Management definition is developing and implementing policies governing technology use. This unit is that grouping, and the situational items all turn on the same move: when conduct is ungoverned, write the standard rather than improvise.
Standards and policies for technology use
The grouping covers bring-your-own-device policy, offsite network access policy, websites, computers for personal activity, Internet messaging, corporate and personal e-mail, and AI-related policies.
Not in this grouping: blockchain, machine learning and big data analytics software (HR software and technology); scheduling, time-keeping and benefits enrollment (electronic self-service); backups, cybersecurity and data integrity (data and information management).
Matching the policy to the situation
- Staff connecting to internal systems from home and client sites: the offsite network access policy. Not a social media policy, not a retention schedule, not a self-service procedure.
- Sales staff using personal phones for the customer system and company email, with one phone lost and no rule in place: develop and implement a BYOD policy covering access, security and device loss. Banning personal devices removes a working practice instead of governing it and leaves the data already on those devices unaddressed. A memo asking people to be careful has no controls. Handling each loss individually leaves the gap permanently open.
- An employee on personal websites and personal e-mail from a company computer where no rule exists: establish a technology-use standard covering company computers, websites and personal e-mail, then apply it consistently. Do not discipline against a rule that did not exist when the conduct occurred. Do not install covert monitoring with no governing policy. Do not call company technology a private matter.
AI-related policies
The BASK says AI-related policies address utilization, transparency, fairness and data privacy. Those four words are the answer.
- Backups, disclosure and retention schedules are data and information management.
- Scheduling, time-keeping and enrollment are electronic self-service.
- Branding, internal platforms and posting frequency are social media management.
Carry this in: BYOD and offsite access are policies, never systems, and AI policy means utilization, transparency, fairness and data privacy.