Foreword

The following company cyber security policy provided by our company will aim at outlining the guidelines and provisions for preserving the security related to our data and technology infrastructure. Especially when the technology is now being relied on to collect, store and manage information.

We have implemented both provisions and instructions that will help the employee. This policy will apply to all our volunteers, contractors, employees, and anyone who has temporary or permanent access to our systems and hardware.

Guidelines

The following guidelines are expected to be followed by all our employees:

1.Confidential data is both valuable and to be kept secret. Some of the common examples are:

• Patents, formulas, or new technology
• Customer lists and their details
• Data of customers
• Unpublished forecast

All of the employees are obliged to follow the confidentiality of such data.

2.Protection of personal and company devices will be important when provided access. To keep the devices safe, you can take the following steps:

• Choose and upgrade a complete antivirus software
• Install security updates of browsers and systems monthly or as the updates are available
• Keeping all of the devices protected using passwords
• Log in only through secure and private networks

3.Keep email safe where there might be scams and malicious software being sent. Make sure you do not open any emails that contain virus infection or those that contain clickbait titles

4.securely manage passwords. Also, make sure that you change your passwords every two months. Make sure you do not exchange your credentials often and only do so when it is necessary.

Remote employees are expected to follow this policy’s instructions as well. Making sure that the private network is secure and all sorts of protection methods have been implemented will be necessary.

Disciplinary Action:

There might be disciplinary actions that will be taken against those employees who fail to keep the instructions of this policy. The following conditions will be taken action against:

• If there are smaller-scale security breach that is either your first time or has been done unintentionally then a verbal warning will be provided and training must be attended to understand the security breach issues
• If there is more than one intentional security breach observed there will be disciplinary actions taken which will lead to the termination of the employee.

Certification

I hereby certify that I have received a copy of the company cyber security policy of [Company name].