Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tip

The following list of “internal“ policies could be provided as standard package for your InfoSec team for review and evaluation after mutual NDA is signed. Our Security & Data Protection Officer VP, Engineering & Compliance Manager would be happy to conduct a session with your InfoSec team to go over it and address any concerns you might have.

  • Code of Conduct

  • Human Resource Security Policy

  • Information Security Policy (on demand)

    IT Assets

    Risk Management Program (on demand)

    • Information Security Roles and Responsibilities Policy

    • Access Control Policy

    • Password Control Policy

    • Emails Policy

    • Antiviruses Policy

    • Information Classification Policy

    • Remote Access Policy

    • Outsourcing Policy

    • Acceptable Use of Information Assets Policy

    • Secure Information Transfer Policy

  • Release/Change Management Process (on demand)

  • Incident Management Policy (on demand)

  • Security Notification Plan (on demand)

  • Business Continuity and Recovery Plans (on demand)

    • Bring Your Own Device Policy (BYOD)

    • Asset Management Policy

    • Data Management Policy

    • Cryptography Policy

    • Physical Security Policy

    • Secure Development Policy (Secure SDLC)

    • Operations Security Policy

    • Incident Response Plan

    • Business Continuity and Disaster Recovery (BC/DR)

    • Third-Party Management Policy

  • Risk Management Policy

  • Other Policies

    • Network Security Policy - Configuration and Hardening Standards

    • Logging and Monitoring Policy

    • Patch Management Policy

Info

All the inquiries on security, data privacy and/or other “internal” policies should be sent to to security@releasemanagement.app.

...