A simple ViewSet for viewing the current Security Message.

GET /api/v1/securitymessage/get_latest_security_message?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "https://api.team.lcog.org/api/v1/securitymessage/4?format=api",
    "pk": 4,
    "description": "LCOG USB Storage Device Acceptable Use Policy",
    "date": "2025-04-30",
    "content": "<h4><strong>LCOG USB Storage Device Acceptable Use Policy</strong></h4>\r\n\r\n<p>A USB Storage Device is any USB device, SD card, external hard drive, or rewritable disc drive that can store information or data.<br />\r\nThis Acceptable Use Policy outlines the proper use of USB storage devices within LCOG.<br />\r\nBy signing this document, you acknowledge that you have read, understand, and agree to comply with the requirements below.</p>\r\n\r\n<p><strong>General Use and Prohibited Actions</strong></p>\r\n\r\n<ul>\r\n\t<li>USB storage devices are&nbsp;<strong>not allowed</strong>&nbsp;for general use within LCOG and are&nbsp;<strong>disabled by default</strong>.</li>\r\n\t<li>Use of a USB storage device is allowed&nbsp;<strong>only if</strong>:\r\n\t<ul>\r\n\t\t<li>It has been&nbsp;<strong>approved</strong>&nbsp;by LCOG&#39;s IS Service Desk through a formal request process.</li>\r\n\t\t<li>It is for an&nbsp;<strong>authorized business purpose</strong>&nbsp;where no alternative method of data transfer is available.</li>\r\n\t</ul>\r\n\t</li>\r\n\t<li>Unauthorized duplication, transfer, or sharing of LCOG data on any USB device is&nbsp;<strong>strictly prohibited</strong>.</li>\r\n\t<li>Use of unapproved USB devices, SD cards, external hard drives, or&nbsp;rewritable disc drives&nbsp;is&nbsp;<strong>prohibited</strong>&nbsp;unless formally approved.</li>\r\n</ul>\r\n\r\n<p><strong>Approval Process</strong></p>\r\n\r\n<ul>\r\n\t<li>A request for USB device use must be submitted by a&nbsp;<strong>Division Deputy Director</strong>&nbsp;or the&nbsp;<strong>Executive Director</strong>&nbsp;to the&nbsp;<strong>IS&nbsp;Service Desk Manager</strong>.</li>\r\n\t<li>Approved USB devices must be&nbsp;<strong>registered</strong>&nbsp;with the IS Service Desk&nbsp;<strong>before</strong>&nbsp;use.</li>\r\n</ul>\r\n\r\n<p><strong>Data Handling</strong></p>\r\n\r\n<ul>\r\n\t<li><strong>Encrypted USB devices</strong>&nbsp;must be used for any storage of&nbsp;<strong>confidential</strong>,&nbsp;<strong>regulatory</strong>, or&nbsp;<strong>legal</strong>&nbsp;information, including&nbsp;<strong>HIPAA-protected data</strong>.</li>\r\n\t<li><strong>Unencrypted USB devices</strong>&nbsp;may only be used for&nbsp;<strong>non-confidential, regular business information</strong>.</li>\r\n</ul>\r\n\r\n<p><strong>Security Requirements</strong></p>\r\n\r\n<ul>\r\n\t<li>All authorized USB devices must be registered and&nbsp;<strong>virus scanned</strong>&nbsp;before being connected to LCOG systems.</li>\r\n\t<li>Users must&nbsp;<strong>physically secure</strong>&nbsp;USB devices at all times, both during use and when transporting them.</li>\r\n\t<li><strong>Lost or stolen USB devices</strong>&nbsp;must be reported to the IS Service Desk&nbsp;<strong>immediately</strong>.</li>\r\n</ul>\r\n\r\n<p><strong>Compliance</strong></p>\r\n\r\n<ul>\r\n\t<li>All users must comply with this Acceptable Use Policy as well as all other LCOG security policies and guidelines.</li>\r\n\t<li>Failure to comply may result in:\r\n\t<ul>\r\n\t\t<li><strong>Suspension</strong>&nbsp;of technology access.</li>\r\n\t\t<li><strong>Disciplinary action</strong>, up to and including&nbsp;<strong>termination</strong>.</li>\r\n\t</ul>\r\n\t</li>\r\n</ul>\r\n\r\n<hr />\r\n<p><strong>Acknowledgment and Agreement</strong></p>\r\n\r\n<p>I have read and understand the LCOG USB Storage Device Acceptable Use Policy.<br />\r\nI agree to comply with the policy and understand that violations may result in disciplinary action, up to and including termination.</p>"
}