Company management is committed to providing the necessary resources and support to maintain an effective information security program.

2. Employee Responsibilities:

All employees are responsible for understanding and adhering to the security policies and procedures defined by the Company. Training on security best practices will be provided regularly.

Information will be classified based on its sensitivity and importance. Access controls and protection measures will be implemented accordingly.

2. Data Handling:

Procedures for the proper handling, storage, and disposal of sensitive information will be established and communicated to all employees.

Access to information systems will be granted based on the principle of least privilege. Employees will only have access to the information and systems necessary for their roles.

2. User Authentication:

Strong authentication mechanisms will be implemented to ensure that only authorized individuals can access sensitive systems and data.

Physical access to company facilities will be restricted to authorized personnel. Security measures, such as keycard access and surveillance cameras, will be implemented.

2. Equipment Security:

Company equipment, including computers and servers, will be physically secured to prevent unauthorized access.

Firewalls and intrusion detection systems will be implemented to protect the company's network from unauthorized access and cyber threats.

2. Encryption:

Sensitive data transmitted over networks will be encrypted to protect it from interception.

An incident response plan will be established to effectively respond to and mitigate security incidents.

2. Reporting Security Incidents:

Employees are required to promptly report any suspected security incidents to the designated security contact.

Regular security awareness training will be provided to employees to keep them informed about security best practices and emerging threats.

2. Phishing Awareness:

Employees will be trained to recognize and report phishing attempts.

Regular security audits and assessments will be conducted to ensure the effectiveness of security controls.

2. Policy Review:

This Security Policy will be reviewed periodically and updated as necessary to address changes in the business environment or security landscape.