Systems Management Policy

Systems Management Policy

The Systems Management Policy outlines the security requirements for the management of Company’s IT networks, Information Systems and the integrity of related business processes. All IT networks and Information Systems are subject to this policy, including those that...
Backup and Recovery Standard

Backup and Recovery Standard

This Backup and Recovery Standard defines the minimum controls to ensure that Company’s information is available for critical processing through the implementation of controls ensuring that business information is backed-up and restorable when data on primary...
Crisis Management Plan

Crisis Management Plan

The main purpose of this document is to establish and document a coordinated plan designed for the Company to respond to crises and to limit intensity, manage and control negative results of a crisis on Company’s employees, products, services, financial condition and reputation.

Internet Hosting and DMZ Standard

Internet Hosting and DMZ Standard

The objective of this standard is to define the configuration to be met by all servers owned or managed by Company that are located outside of the firewalls. The standards are designed to minimize the exposure to Company from damages that may result from malicious activities from both internal and external entities. Internet facing devices located outside the Company firewalls are considered part of the DMZ.

Backup Standard

Backup Standard

The objective of this standard is to define the minimum backup parameters to ensure that mission critical applications, data and archives and Company business applications, user’s data and archives are adequately preserved and protected against data loss and destruction in a format suitable for timely restore and recovery.