HOT
Wednesday, May 21 2025
Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Written by January 21, 2024

Data Security and Encryption Standards for New Servers

IT Policy Article

EDC Inc Data Security and Encryption Standards for New Servers Policy

This policy outlines the standards and procedures for ensuring data security and encryption on all new servers at EDC Inc. It is designed to protect our company’s information assets from unauthorized access, disclosure, alteration, or destruction.

1.0 Policy Statement

EDC Inc is committed to maintaining the highest level of data security and encryption on all new servers. This policy applies to all employees, contractors, and third-party service providers who have access to EDC Inc’s information systems.

2.0 Roles and Responsibilities

  • The IT Server Operations department is responsible for the implementation and maintenance of this policy.
  • The IT Server Build Operations department is responsible for ensuring that all new servers are built in compliance with this policy.
  • The IT-SOC (Incident management) department is responsible for managing any incidents related to data security and encryption on new servers.
  • The Corporate Physical Security department is responsible for the physical security of the servers.
  • The IT Security Operations department is responsible for monitoring compliance with this policy and reporting any violations to the IT Audit and Compliance department.
  • The IT Monitoring Operations department is responsible for ongoing monitoring of the servers to ensure compliance with this policy.
  • The IT Database Operations department is responsible for ensuring that all databases on new servers are encrypted in accordance with this policy.
  • The IT Audit and Compliance department is responsible for auditing compliance with this policy and reporting any violations to the IT Director.

3.0 Data Security Standards

Read moreData Protection and Privacy Policy

All new servers must be configured to meet the following data security standards:

  • All user and service accounts must be in Active Directory.
  • All servers must be included in the CMDB inventory management tool.
  • All changes to server configurations must be approved by the CAB Change Audit Board.
  • All servers must be patched every 30 days, unless an IT Exception is approved by IT Security. OS patching is managed by IT Server Operations.

4.0 Encryption Standards

All new servers must be configured to meet the following encryption standards:

  • All data at rest must be encrypted using industry-standard encryption algorithms.
  • All data in transit must be encrypted using secure communication protocols.
  • All encryption keys must be securely stored and managed.

5.0 Compliance

Read moreNetwork Security Policy

Failure to comply with this policy may result in disciplinary action, up to and including termination of employment or contract. Any suspected violations of this policy should be reported immediately to the IT Director or the IT Audit and Compliance department.

6.0 Policy Review

This policy will be reviewed at least annually by the IT Director and the IT Audit and Compliance department to ensure that it remains relevant and effective.

Summary

Read moreAccess Control Policy

EDC Inc is committed to maintaining the highest level of data security and encryption on all new servers. This policy outlines the roles and responsibilities of various departments in ensuring compliance with data security and encryption standards. It also sets out the data security and encryption standards that all new servers must meet. Compliance with this policy is mandatory for all employees, contractors, and third-party service providers who have access to EDC Inc’s information systems.

You may also like

Team Department Details

Links and Services

Contact Information for Customers who need support.

282 comments

Leave a Reply to africa porn Cancel reply

Your email address will not be published. Required fields are marked *