Policy Statement: KKI has adopted guidelines and procedures for physical and premises security to ensure security checks and protection of assets from internal/external human intervention, security breaches and natural disasters
Clear screen policy: Client PC and Server terminals require username/login ID and password to be entered before accessing any electronic assets. No confidential, sensitive or critical data/information is displayed or on the screen at locations accessible to external parties/un-authorized staff and users
Clear Desk Policy: All confidential, sensitive and critical data and information is not left un-attended on the working desks
Objective: Propose guidelines and procedures for physical environment security measures to check and control un-authorized physical access to assets
To protect resources from security breaches and natural disasters
Defines security levels to safeguard information assets and resources
Desription: Adequate measures have been taken to ensure
unauthorized physical access and interference to office premises and information processing facilities
Office premises is secured through Security Guards and night watchman
Secured Operations, Network and Internal Audit departments for maintaining the confidentiality of such sensitive areas
Controls on arrival of guests
Appropriate measures like lock in cabinets and rooms, Fire alarms , staff training has been provided for easy evacuation in case of bomb explosions, fire, earthquake and any other disaster
Equipments have been placed in secured areas with appropriate sitting and supporting facilities
Maintenance of office equipment and monitoring through weekly inspections
Control on movement of office equipment in and out of the office
Service delivery forms for keeping a track of maintenance of equipment
SLA are signed with all vendors explicitly defining the security clauses and orientation has been given to them
Services of vendors are reviewed after every six months
Disposal of equipment is authorized only by the CEO