We ensure strong password checks for all kind of encryption. We have set a strong password use policy throughout the organization. We enforce all the password must contain a combination of Lowercase uppercase, numbers and special characters.
We strictly encourage all the employees to never share their password with anyone else or writing it on anywhere that other can also have access to.
Also, we require PC/laptop password change by all employees every 3 months.
We regularly train our employee to keep the email communication safe and share only the relevant information via email that is absolutely required.
We also have regular training sessions of all employees to keep them updated with latest email threats such as Scams, phishing, mail-bombs etc and best practice to be safe from such threats.
Employees cannot access the official email id via OWA or Outlook 365.
We monitor very closely the flow of data through the organization.
We have regular checkpoints to monitor:
1: What data is being processed? 2: How the data is being used? 3: Who is receiving it?
Sensitive Data is shared only on a "need to know" basis, that too with prior approvals.
We enforce a strict data protection rule in our company policy.