Director of IT role is major decision maker or any IT related issue such as network security, database, network issues etc. As policy to one to one end user and it department, which should cover as follows.
1. End-user is not allowed to share files or media files to any user through email or social media.
2. Login password should not be changed without IT approval of pc or workstation or laptop. Once changes password should be shared to IT department.
3. Sharing password Wi-Fi or access point to outsiders to be avoided.
4. Connecting usb drive or flash drive to workstation or laptop,
5. Own laptop or smartphone should not be connected to office network.
6. If workstation or desktop or laptop is effected with virus immediately to be reported to IT department.