Security Awareness and Compliance
Incident Response and Training
- All employees must complete confidentiality training.
- All employees are encouraged to report suspicious behavior or activities.
- Any security incidents must be reported immediately to the Managing Director for investigation.
- Incident investigations are documented, and corrective measures are implemented.
Compliance and Enforcement
- This policy complies with GDPR.
- Regular audits are conducted to ensure it remains compliant.
- The policy is reviewed on an annual basis or more frequently if significant changes are required. Employees are notified of changes and are required to read the documents.
- This policy is mandatory, and violations may result in disciplinary action, including termination of employment.