Vision
Establishment
Procedures
Implementation
Monitoring
Messages


PHYSICAL, ENVIORNMENTAL AND PREMISES SECURITY

Policy Statement:
KKI has adopted guidelines and procedures for physical and premises security to ensure security checks and protection of assets from internal/external human intervention, security breaches and natural disasters

Clear screen policy: Client PC and Server terminals require username/login ID and password to be entered before accessing any electronic assets. No confidential, sensitive or critical data/information is displayed or on the screen at locations accessible to external parties/un-authorized staff and users

Clear Desk Policy: All confidential, sensitive and critical data and information is not left un-attended on the working desks

Objective:
Propose guidelines and procedures for physical environment security measures to check and control un-authorized physical access to assets

To protect resources from security breaches and natural disasters

Defines security levels to safeguard information assets and resources

Desription:
Adequate measures have been taken to ensure unauthorized physical access and interference to office premises and information processing facilities

Office premises is secured through Security Guards and night watchman

Secured Operations, Network and Internal Audit departments for maintaining the confidentiality of such sensitive areas

Controls on arrival of guests

Appropriate measures like lock in cabinets and rooms, Fire alarms , staff training has been provided for easy evacuation in case of bomb explosions, fire, earthquake and any other disaster

Equipments have been placed in secured areas with appropriate sitting and supporting facilities

Maintenance of office equipment and monitoring through weekly inspections

Control on movement of office equipment in and out of the office

Service delivery forms for keeping a track of maintenance of equipment

SLA are signed with all vendors explicitly defining the security clauses and orientation has been given to them

Services of vendors are reviewed after every six months

Disposal of equipment is authorized only by the CEO