Title: Ransomware, Phishing Attacks, Email and Internet Use Policy Author: Kriko Published: Aug 8, 2026 Last modified: Aug 13, 2026 --- 1. [Home](https://kriko.io/) / 2. [Company Policies](https://kriko.io/company-policies) / 3. [Information Technology and Data Management Policies](https://kriko.io/company-policies/information-technology-and-data-management-policies)/ 4. Ransomware, Phishing Attacks, Email and Internet Use Policy # Company Policies The principles that guide every team at Kriko. From how we hire and protect data to how we uphold quality and sustainability. ## Ransomware, Phishing Attacks, Email and Internet Use Policy ## Purpose This policy aims to reduce the risks arising from ransomware, phishing attacks and other malicious activities. It also establishes the principles governing employees’ use of email and the internet in a manner that protects the Company’s interests, systems and reputation. ## Email Use Employees must send and receive business-related emails through the email accounts designated by the Company. Personal email accounts must not be used for business communications. Emails identified as suspicious or marked as spam must be reviewed with caution and reported to the Company’s IT department or the relevant department manager where necessary. Files received by email must be checked carefully. Employees must not open or download unknown or suspicious files. Business emails must be written using appropriate, accurate and professional language to ensure effective communication and protect the Company’s reputation. ## Ransomware and Phishing Attacks Employees must remain aware of the risks associated with ransomware and phishing attacks. The Company provides regular training and awareness activities to keep employees informed about emerging threats and appropriate security practices. Suspicious emails must be assessed carefully and reported, particularly where they request personal or financial information or contain links that the recipient is asked to click. Employees must comply with the security measures established by the Company and ensure that approved antivirus software and security patches are kept up to date on their devices. ## Internet Use Internet access must primarily be used for business-related activities. Personal internet use may be limited in accordance with Company policies. Employees must use the internet in compliance with applicable laws, regulations and Company policies. Engaging in illegal activities online or sharing content that may damage the Company’s reputation is strictly prohibited. Websites and downloaded files must be assessed carefully and obtained only from trusted sources. Suspicious, harmful or malicious content must be avoided. ## Responsibilities and Reporting Violations Employees must immediately report ransomware incidents, phishing attempts and other suspected security breaches to the Company’s IT department, information security representative or relevant department manager. The Company will respond to reported security incidents promptly and effectively and will implement the necessary containment, corrective and preventive measures. ## Communication Policies * [Internal Communication and Collaboration Policy](https://kriko.io/company-policies/communication-policies/internal-communication-and-collaboration-policy) * [Internal Communication Channels and Meeting Policy](https://kriko.io/company-policies/communication-policies/internal-communication-channels-and-meeting-policy) * [Social Media Policy](https://kriko.io/company-policies/communication-policies/social-media-policy) ## Crisis and Incident Management Policies * [Crisis Communication and Reputation Management Policy](https://kriko.io/company-policies/crisis-and-incident-management-policies/crisis-communication-and-reputation-management-policy) * [Emergency Planning and Response Policy](https://kriko.io/company-policies/crisis-and-incident-management-policies/emergency-planning-and-response-policy) ## Disciplinary Policies * [Disciplinary Policy](https://kriko.io/company-policies/disciplinary-policies/disciplinary-policy) ## Human Resources Policies * [Diversity, Equity and Inclusion Policy](https://kriko.io/company-policies/human-resources-policies/recruitment-policy) * [Employee Training and Development Policy](https://kriko.io/company-policies/human-resources-policies/termination-policy) * [Anti-Discrimination and Diversity Policy](https://kriko.io/company-policies/human-resources-policies/anti-discrimination-and-diversity-policy) * [Occupational Health and Safety Policy](https://kriko.io/company-policies/human-resources-policies/remote-hybrid-work) * [Recruitment and Termination Policy](https://kriko.io/company-policies/human-resources-policies/recruitment-and-termination-policy) * [Working Hours, Leave and Absence Policy](https://kriko.io/company-policies/human-resources-policies/working-hours-leave-and-absence-policy) ## Business Ethics and Compliance Policies * [Password Creation and Use Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/data-protection-policy) * [Transparency and Reporting Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/acceptable-use-policy) * [Conflict of Interest and Anti-Bribery Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/conflict-of-interest-and-anti-bribery-policy) * [Data Privacy and Security Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/data-privacy-and-security-policy) * [Ethical Conduct and Integrity Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/ethical-conduct-and-integrity-policy) * [Legal and Regulatory Compliance Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/incident-response) ## Customer Relations Policies * [Customer Data Privacy and Security Policy](https://kriko.io/company-policies/quality-compliance/quality-management) * [Complaint Management and Feedback Policy](https://kriko.io/company-policies/quality-compliance/anti-bribery-corruption) * [Customer Satisfaction Policy](https://kriko.io/company-policies/quality-compliance/code-of-conduct) ## Information Technology and Data Management Policies * [Ransomware, Phishing Attacks, Email and Internet Use Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/environmental-policy) * [Vulnerability Disclosure Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/vulnerability-disclosure-policy) * [Software Licensing and Usage Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/social-responsibility) * [Data Backup and Recovery Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/supplier-code-of-conduct) * [Data Security and Protection Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/data-security-and-protection-policy) * [Information Technology Use and Access Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/information-technology-use-and-access-policy) ## Track the digital heartbeat with Kriko Subscribe to receive curated insights, news, and ideas shaping the digital landscape. By checking this box, you acknowledge and accept our [privacy policy](https://kriko.io/privacy-policy).