Intent


Connor Group maintains enterprise accounts with various cloud storage and productivity providers to facilitate working with clients who prefer or require their vendors to work with their toolset.  


Examples of these secondary cloud storage and productivity providers are:

  • Dropbox
  • Google Workspace (aka G Suite)
  • Box


Connor Group can provide employees with accounts and licensing to these services on an as-needed basis.


Usage


These secondary storage and productivity accounts are primarily to allow CG employees access to client owned files or productivity applications while maintaining proper access controls and business to business relationships.  


  • Connor Group employees should ask clients expressing a preference for one of these secondary services to invite Connor Group persons to access the client's shares, data, or services when necessary. 
    • CG can create shared folders within OneDrive that the client can be invited to access if a client is unwilling or unable to create shared folders and invite CG users. 
  • CG employees must not use personal accounts to access client files.
    • This helps ensure that the business-to-business relationship is maintained by associating the CG employee's access to the client's resources through the CG employee's work account.  
  • Conversely, CG employees may not create or own files or folders in secondary cloud storage and productivity accounts that are shared with clients, 3rd parties, or other CG employees. 
    • CG Employees may only contribute to shared folders owned and shared by a client.
    • Creation of shared files or folders from these secondary services is forbidden by data management policies and will be blocked by technical controls when possible.


Relationship to Microsoft Office 365 (Office Suite, OneDrive, and SharePoint)

  • Dropbox, Box, Google Workspace Drive, Google Workspace applications, and other secondary cloud storage and productivity tools are NOT an alternative for OneDrive or other Microsoft Office 365 applications.
  • CG employees must not store personal or work files in their secondary cloud storage accounts.


Regular usage reports on these secondary cloud service accounts will be run.  CG employees that are found to be using a secondary services outside of policy will be notified as such, asked to move the data, and change their usage pattern. 


Account Activity


Secondary accounts that are not activity used will be disabled.  CG employees granted a secondary account should notify IT Support if they don't anticipate needing to use the secondary account for more than a period of 60 days.  These secondary accounts can be re-enabled later if necessary.  


Secondary accounts that report as inactive for a period of more than 90 days will be automatically disabled.  A series of notices will be sent to the user allowing them time to take action with the account which will prevent the account from being disabled.