Information Security & IT Usage Policy

Objective

The objective of this policy is to ensure secure management of information assets, minimize cybersecurity risks, maintain regulatory compliance, and support business continuity through effective information security practices.

Scope

This policy applies to all employees, consultants, contractors, partners, and authorized users who access information systems, applications, networks, cloud services, or digital resources managed by Axentis Technologies Pvt. Ltd.

Information Security Principles

• Protect confidential business and client information.
• Maintain data integrity and accuracy.
• Ensure availability of critical systems and services.
• Implement risk-based security controls.
• Promote responsible and ethical technology usage.
• Continuously improve security processes and practices.

Data Protection

Appropriate technical and organizational safeguards are implemented to protect sensitive information against unauthorized access, disclosure, modification, loss, or destruction.

• Access controls and user authentication.
• Secure password management practices.
• Encryption of sensitive information where applicable.
• Regular backup and recovery procedures.
• Monitoring and logging of critical systems.

Acceptable Use of IT Resources

Technology resources provided by the organization must be used responsibly, professionally, and for legitimate business purposes.

• Users must not share credentials with unauthorized individuals.
• Unauthorized software installations are prohibited.
• Users must report suspected security incidents promptly.
• Company resources shall not be used for illegal activities.
• Users must comply with applicable security guidelines.

Cybersecurity Measures

Axentis Technologies Pvt. Ltd. adopts proactive cybersecurity practices to identify, assess, and mitigate security risks affecting systems, applications, and business operations.

• Security monitoring and threat detection.
• Vulnerability assessments and remediation.
• Secure software development practices.
• Network and endpoint protection.
• Incident response and recovery procedures.

Legal & Regulatory Compliance

Axentis Technologies Pvt. Ltd. endeavors to comply with applicable Indian laws, data protection regulations, contractual obligations, and industry standards relevant to information security and technology operations.

Security Incident Reporting

Any actual or suspected information security incident must be reported immediately to the designated authority for investigation and appropriate corrective action.

Policy Review

This policy shall be reviewed periodically to ensure its continued effectiveness and alignment with business objectives, technological advancements, and regulatory requirements.