{"id":2210,"date":"2024-12-10T20:37:44","date_gmt":"2024-12-10T20:37:44","guid":{"rendered":"https:\/\/liquidqube.com\/?page_id=2210"},"modified":"2025-02-19T05:18:07","modified_gmt":"2025-02-19T05:18:07","slug":"information-security-policy","status":"publish","type":"page","link":"https:\/\/www.liquidqube.com\/it\/information-security-policy\/","title":{"rendered":"Information Security Policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Information Security\n<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Introduction<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

At LiquidQube, protecting our information assets, customer data, and systems is a core priority. This Information Security Policy outlines our commitment to safeguarding the confidentiality, integrity, and availability of all information under our control. It provides a framework for managing information security risks and ensuring compliance with applicable laws, regulations, and industry standards.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Scope<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

This policy applies to all employees, contractors, partners, suppliers, and stakeholders who interact with LiquidQube\u2019s information systems, data, and assets. It covers all forms of information, whether electronic, paper-based, or verbal, across all locations where LiquidQube operates.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Objectives<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Confidentiality:<\/strong> Protect sensitive information from unauthorised access and disclosure.<\/p>

Integrity:<\/strong> Ensure the accuracy, completeness, and reliability of information.<\/p>

Availability:<\/strong> Maintain reliable access to information and systems when required.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Key Principles<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Access Control:<\/strong><\/p>

Implement the principle of least privilege, restricting access to information based on job roles and responsibilities.<\/p>

Enforce strong authentication mechanisms, including multi-factor authentication (MFA).<\/p>

Data Classification and Handling:<\/strong><\/p>

Classify information into sensitivity levels (e.g., public, confidential, restricted).<\/p>

Ensure proper handling, storage, and disposal of sensitive data in line with classification requirements.<\/p>

Secure Communication:<\/strong><\/p>

Encrypt sensitive data in transit and at rest.<\/p>

Use secure communication channels for sharing and transmitting information.<\/p>

Physical Security:<\/strong><\/p>

Restrict physical access to information systems and data storage areas.<\/p>

Implement safeguards to protect against physical threats such as theft, damage, or unauthorised access.<\/p>

Incident Management:<\/strong><\/p>

Establish a clear incident response plan for identifying, reporting, and mitigating security incidents.<\/p>

Conduct root cause analyses and implement corrective actions to prevent recurrence.<\/p>

Third-Party and Supplier Security:<\/strong><\/p>

Require all third parties and suppliers to adhere to LiquidQube\u2019s security standards.<\/p>

Perform regular security assessments and due diligence on third-party providers.<\/p>

Training and Awareness:<\/strong><\/p>

Provide ongoing security awareness training to employees and contractors.<\/p>

Promote a culture of security by encouraging vigilance and best practices.<\/p>

Monitoring and Logging:<\/strong><\/p>

Continuously monitor information systems for suspicious activities and potential threats.<\/p>

Maintain logs of system activities to support forensic investigations and compliance requirements.<\/p>

Compliance:<\/strong><\/p>

Ensure compliance with applicable legal, regulatory, and contractual requirements related to information security.<\/p>

Regularly review and align security practices with recognised industry standards and frameworks.<\/p>

Data Backup and Recovery:<\/strong><\/p>

Maintain regular, secure backups of critical information.<\/p>

Test recovery procedures periodically to ensure data availability in case of incidents.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Roles and Responsibilities<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Leadership:<\/strong><\/p>

Provide resources and support to maintain robust information security practices.<\/p>

Promote a culture of accountability for information security across the organisation.<\/p>

Employees:<\/strong><\/p>

Follow all information security policies, procedures, and guidelines.<\/p>

Report security incidents or suspicious activities immediately to the IT Security Team.<\/p>

IT and Security Teams:<\/strong><\/p>

Develop, implement, and maintain security controls and protocols.<\/p>

Monitor and respond to security threats in a timely manner.<\/p>

Third Parties and Suppliers:<\/strong><\/p>

Comply with LiquidQube\u2019s information security requirements.<\/p>

Ensure security measures align with LiquidQube\u2019s standards when accessing or processing organisational information.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Policy Implementation<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Risk Assessments: <\/strong>Conduct regular risk assessments to identify and address vulnerabilities.<\/p>

Develop and implement risk mitigation strategies.<\/p>

Audits and Reviews:\u00a0<\/strong>Perform periodic internal and external audits to evaluate the effectiveness of security measures.<\/p>

Update policies and controls based on audit findings and emerging threats.<\/p>

Secure Development:\u00a0<\/strong>Incorporate security best practices into the design, development, and deployment of all software and systems.<\/p>

Regularly test and validate the security of systems and applications.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Incident Reporting<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

All employees and stakeholders must report suspected or actual security incidents to compliance@liquidqubegroup.com<\/strong>\u00a0immediately. Examples of incidents include:<\/p>

Unauthorised access to information or systems.<\/p>

Data breaches or leaks.<\/p>

Malware infections or phishing attempts.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Policy Review<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

This Information Security Policy will be reviewed annually or as needed to address changes in the threat landscape, legal and regulatory requirements, or organisational needs. Updates will be communicated to all employees and relevant stakeholders.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Contact Information<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

For any questions or concerns regarding this policy, please contact the Compliance Department at\u00a0compliance@liquidqubegroup.com<\/strong>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Information Security Introduction At LiquidQube, protecting our information assets, customer data, and systems is a core priority. This Information Security Policy outlines our commitment to safeguarding the confidentiality, integrity, and availability of all information under our control. It provides a framework for managing information security risks and ensuring compliance with applicable laws, regulations, and industry […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-2210","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.liquidqube.com\/it\/wp-json\/wp\/v2\/pages\/2210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.liquidqube.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.liquidqube.com\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.liquidqube.com\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.liquidqube.com\/it\/wp-json\/wp\/v2\/comments?post=2210"}],"version-history":[{"count":0,"href":"https:\/\/www.liquidqube.com\/it\/wp-json\/wp\/v2\/pages\/2210\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.liquidqube.com\/it\/wp-json\/wp\/v2\/media?parent=2210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}