End-User Equipment Standard  

Standard: End-User Equipment Standard, ICTA-2.001:2016

Thematic Area: Infrastructure

Description: This ICTA Standard establishes guidelines for acquisition, data security, privacy, access, storage, management, retention and disposal of all end user devices and services. ICT systems and services should support data exchange, portability and interoperability.

End user devices include personal computers, consumer devices, or removable storage media that can collect, process, or store information.

Areas Covered:

  • End user equipment procurement
  • Technical specifications
  • Bring-your-own-device policy
  • Inventory
  • Maintenance
  • Decommissioning
  • Disposal mechanisms
  • Data- in- transit protection
  • Data- at-rest protection
  • Authentication (MCA-issued devices, non-MCA issued devices)
  • Compliance checklist
  • ICT minimum hardware specifications,
  • Mandatory and fixed versions software specifications,
  • Mandatory and upgradable versions software specifications,
  • Characteristics of storage encryption technologies,
  • Storage encryption technology planning and implementation 84
  • Alternatives to encrypting storage on end user devices
  • Accessibility by persons with disability

Date of Operationalisation: 01 October 2016

End-User Equipment Standard