Data Security / Cybersecurity Policy

At Guardian Technical Contracting (GTC), we recognize the importance of protecting information assets and maintaining the confidentiality, integrity, and availability of data. This Data Security and Cybersecurity Policy outlines our commitment to safeguarding company, client, and third-party information against unauthorized access, misuse, loss, or cyber threats.

Our Commitment

GTC is committed to:

Protecting sensitive and confidential information from cyber risks and data breaches.
Maintaining secure information systems and networks.
Complying with applicable data protection, cybersecurity, and information security laws and regulations.
Continuously improving cybersecurity controls in response to evolving threats.

Scope

This policy applies to all:

Employees, contractors, consultants, and third parties acting on behalf of GTC
Information systems, networks, devices, and data owned, managed, or processed by GTC

Information Security Principles

1. Data Protection

Access to data is restricted to authorized personnel only.
Confidential information is handled, stored, and transmitted securely.
Personal and business data is protected from unauthorized disclosure or misuse.

2. Cybersecurity Controls

Use of secure systems, firewalls, antivirus software, and access controls.
Regular updates and monitoring to prevent vulnerabilities and cyber threats.
Protection against malware, phishing, unauthorized access, and data breaches.

3. User Responsibility

Users must safeguard login credentials and system access details.
Company systems must be used responsibly and only for authorized business purposes.
Any suspected cybersecurity incident must be reported immediately.

4. Incident Management

Cybersecurity incidents are investigated promptly and appropriate corrective actions are taken.
Measures are implemented to prevent recurrence and minimize impact.

5. Third-Party Security

Third parties with access to GTC systems or data are required to comply with equivalent security standards.
Due diligence is conducted to reduce cybersecurity and data protection risks.

Compliance and Enforcement

Failure to comply with this policy may result in disciplinary action and, where applicable, legal consequences. GTC regularly reviews and updates its cybersecurity measures to ensure ongoing effectiveness.