Relationships with partners
Relationships with collaborating entities and partners must always be backed by the corresponding service agreements, including clauses guaranteeing the proper use of information and confidentiality agreements.
ISMS
Policy by Topic
This policy covers all information used by 2CX in the course of its activities and is mandatory for the entire organization, as well as for the collaborating entities and partners involved in the use of information and systems.
Data lifecycle
The Security Policy applies to every stage of the data lifecycle: collection, generation, distribution, storage, processing, handling, transport, consultation and destruction; and to the systems that process the data: analysis, design, development, deployment, testing and maintenance.
Information security properties
This policy concerns the adoption of practices and actions intended to preserve the main security properties applied to information:
- Confidentiality: ensure that data and systems are accessed only by duly authorized people;
- Integrity: ensure the accuracy of information and systems against alteration, loss or destruction, whether accidental or fraudulent;
- Availability: ensure that information and systems are always available when needed and can be used in the required manner and time;
Topics and controls covered
The Corporate Information Security Policy supports the topics and controls listed below, which are addressed in other specific policies, documents and procedures:
- Access control;
- Physical and environmental security;
- Asset management;
- Information transfer;
- Secure configuration and handling of user endpoint devices;
- Network security;
- Information security incident management;
- Backup;
- Cryptography and key management;
- Information classification and handling;
- Technical vulnerability management.
- Secure development.