Operation Security Policy

The Operation Security Policy establishes the framework to secure the company's assets, personnel, and physical infrastructure. This policy outlines the principles, responsibilities, procedures, and continuity of operations.

Roles and responsibilities

• Operation Security Management: The management ensures and oversees the implementation of the policy. They also allocate resources for security initiatives and provide extensive training to team members. 
• Operation Security Team Members: The team members comply with all security policies and procedures. They report any suspicious activities and are required to attend information security training.
• Operation Security Support Team Members: The team implements and maintains security controls to address incidents. They regularly monitor the system for potential threats.
• Operation Security Physical Security Team: The team ensures the security of physical premises and controls access to sensitive areas.

Access Control

• The team implements role-based access controls to ensure that stakeholders have access only to the information necessary for their roles.
• The team regularly reviews and updates access permissions to reflect changes in roles and responsibilities.

Data Protection

• The team encrypts sensitive data at rest and data in transit.
• The team implements data classification to protect data based on its sensitivity.
• The team regularly backs up critical data.
• The team ensures data are securely backed up.

Network Security

• The team Implements firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to protect the network from unauthorized access.
• The team updates and patches systems to protect against vulnerabilities.
• The team conducts vulnerability assessments and penetration testing to identify potential risks.

Incident Management Policy

• The team establishes an incident response process to detect, address, and recover from security incidents.
• Please read the Incident Management Policy for more details.

Physical Security

• The team controls access to physical premises using security badges and other access control mechanisms.
• The team monitors premises using surveillance cameras.
• The team ensures that sensitive areas are protected through locked doors and restricted access.