Data Privacy and Security
a. Data Privacy Principles
The Company takes all necessary measures to protect the confidentiality of customer, employee and business data.
Data must be protected against unauthorised access, disclosure, alteration or misuse.
b. Data Classification
The Company classifies data according to its level of confidentiality and applies the appropriate security controls.
Sensitive, personal and commercially confidential information is identified accurately and protected accordingly.
c. Access Controls
Users are granted access to data according to their roles and responsibilities.
Access controls and authentication methods are implemented to prevent unauthorised access.
Remote Working Security
a. Secure Internet Connection
Employees must use a secure internet connection when working remotely.
The Company supports connection security through appropriate safeguards and encryption technologies.
b. Strong Password Policy
Employees are required to use strong and complex passwords.
Passwords must be changed regularly, and login credentials must not be stored on shared computers.
All employees are required to comply with the Company’s Password Creation and Use Policy.
c. Application and Software Security
The Company uses up-to-date software and applications to address security vulnerabilities.
Remote employees must install security updates regularly and ensure that firewall software remains enabled.
Data Transmission and Storage
a. Secure Data Transmission
The Company uses secure communication channels for the transmission and sharing of data.
Sensitive or encrypted data must be transmitted using secure methods.
b. Data Storage and Backup
Data is stored on secure servers, and regular backups are performed.
Secure backup and recovery procedures are implemented to prevent data loss.
Data relating to projects whose contracts have been terminated is deleted after the retention period specified in the relevant agreement has expired.
Training and Awareness
a. Awareness Training
All employees receive regular training on data privacy and security.
Employees are provided with guidance on data security policies and recognised best practices.
b. Breach Reporting and Investigation
Employees are provided with a secure mechanism for reporting suspected data breaches. The “Speak Up” platform is used for such reports.
Reported breaches are investigated confidentially, and the necessary corrective and preventive measures are implemented.
