John Walne Workplace Investigations and Training Ltd.

Information Security Policy

Objective

The Company is committed to protecting the confidentiality, integrity and availability of information.

Access Control

Access to information shall be restricted to authorised individuals on a need-to-know basis.

Password Security

• Strong passwords must be used.

• Passwords must not be shared.

• Multi-factor authentication should be enabled wherever available.

Device Security

All laptops and devices used for Company business shall:

• Be password protected;

• Use device encryption.

• Have anti-malware protection installed;

• Be kept up to date with any security updates via Windows.

Email and File Security

It is recommended that personal information will be transmitted using appropriate security measures including:

• Password protection;

• Encryption; or

• Secure file-sharing platforms.

Physical Security

Paper records containing confidential information will be shredded once no longer required.

Incident Reporting

Any security incident must be reported immediately to the Director.

Information Security Policy