Effective Date: 1/1/2023
1. Introduction
Birdzi is committed to maintaining the highest level of security and compliance for our clients and our organization. This Security Policy outlines our approach to safeguarding data, maintaining the integrity of our systems, and ensuring compliance with applicable regulations.
2. Information Security Responsibilities
2.1 Management’s Commitment
Birdzi’s management is dedicated to the continuous improvement of our security practices. We commit to allocating resources, training employees, and fostering a culture of security.
2.2 Employee Responsibilities
All employees are responsible for following security policies and procedures. This includes:
– Protecting sensitive information.
– Reporting security incidents or vulnerabilities promptly.
– Participating in security awareness and training programs.
3. Data Protection
3.1 Data Classification
We classify data into categories based on sensitivity. This classification guides our data handling and access control measures.
3.2 Data Encryption
Data in transit and data at rest are encrypted using strong cryptographic methods to ensure confidentiality and integrity.
3.3 Access Control
Access to data and systems is limited to authorized personnel only. Access rights are granted based on the principle of least privilege.
4. System Security
4.1 System Hardening
All systems are securely configured and regularly patched to protect against vulnerabilities.
4.2 Incident Response
We have an incident response plan in place to handle security incidents. Employees are required to report any security incidents promptly.
4.3 Third-Party Security
Third-party vendors and partners are assessed for their security practices and compliance with our security standards.
5. Compliance
5.1 Regulatory Compliance
Birdzi is committed to adhering to relevant laws and regulations in data security and privacy.
5.2 Compliance Monitoring
Regular compliance audits and assessments are conducted to ensure our practices align with industry standards and legal requirements.
6. Training and Awareness
Employees are provided with security training to enhance their awareness and knowledge of security best practices.
7. Physical Security
Physical security measures are in place to protect our equipment, data centers, and infrastructure.
8. Security Policy Review
This policy is reviewed periodically to ensure it remains up-to-date and effective.
9. Contact Information
For security-related questions or concerns, please contact support@birdzi.com.