Twitter privacy policy 

Organizational Security Policy Created 26 May 2023 This policy will be reviewed by [security-contact- dailymotivation ] ([security-contact-blogger ]) on a annual basis. Any suggestions or feedback on the policy’s contents should be directed to them. Device Security [organisation- https://marathimanase1990.blogspot.com/?m=1 ] manages device security in the following way, depending on the situation: - Profiles on your devices: With your consent, we will install a work profile on your personal devices in order for you to use them in the course of your work. This work profile will keep your work and personal use of the device separated. In addition to other device security measures, [organisation-name] will also provide you with webcam cover to use on your devices. To protect devices from unauthorised physical infiltration, all devices which are used for [organisation- https://marathimanase1990.blogspot.com/?m=1 ] purposes should have an automatic screen lock enabled and may be configured to use fingerprint authentication. To support device security across the organization, we use the following tools: Google Endpoint Management [organisation-name] is responsible for managing data backups which are kept in physical storage. To ensure we’re able to recover data during a data loss or compromise incident, we perform backups on an daily basis. [organisation- dailymotivation ] requires that devices used for work purposes be backed up as the loss, exposure or corruption of [organisation- https://marathimanase1990.blogspot.com/?m=1 ] data puts us, and those we work with, at risk. Backups are managed in the following ways: - Backups are encrypted to help protect against unauthorised access. Communications Security In order to protect your online activities from common tracking and interference, we recommend all staff install the following privacy-enhancing extensions: Privacy Badger, and HTTPSEverywhere. When communicating sensitive work data, [organisation- https://marathimanase1990.blogspot.com/?m=1 ] prefers staff use the following tools. - For 1-1 communications (e.g. direct message to a colleague), please use Message . Accounts Security Passwords are hard to remember, so [organisation- https://marathimanase1990.blogspot.com/?m=1 ] ask staff to use a password manager. In particular, we ask you to use PasswordSafe and if you require any help with set up or using this tool then you should discuss it with [security-contact-sair48515@gmail.com ]. Two-factor authentication is a good method of securing our accounts beyond passwords as it requires an additional one-time code to be provided at login, putting an extra barrier between your data and an attacker. Two-factor authentication should be enabled on every account which supports it. [organisation- https://marathimanase1990.blogspot.com/?m=1 ] requires staff to use SMS or phone call authentication methods. However, be aware of the risks of interception that come with using these methods. For hardware authentication, we will provide you with a security key. Should you require any help with using the key, contact [security-contact-sair48515@gmail.com ]. Travel Security We provide staff with devices for use while travelling in order to lessen the impact should they become compromised. Before travelling, there are steps which should be taken to prepare devices containing sensitive information. For help with any of the following security measures, please contact [security-contact- sair48515@gmail.com ]. - Deleting unnecessary data from your devices before travelling reduces how much is exposed should the device be accessed without your knowledge. Assess each data group by how essential it is to your trip and whether it can be safely accessed via non-local storage while abroad. Protecting your internet activity from invasive monitoring can involve a range of solutions. [organisation- https://marathimanase1990.blogspot.com/?m=1 ] advises staff to use another VPN on devices that are connected to the internet. [security-contact-sair48515@gmail.com ] can help with set up. If you are in need of assistance while travelling, please contact either your pre-arranged travel buddy or: SAI RAM. Email: sair48515@gmail.com Environmental Security Our ‘clean desk’ policy requires staff to keep their workspaces clean and free of any sensitive documents and devices overnight or while not in use. By keeping such items tidied away, you are preventing visitors and other unauthorised persons from viewing confidential information. You’ll be provided with a lockable another storage option which should be used to store papers and valuable hardware, such as phones, memory sticks and sensitive documents. [organisation- https://marathimanase1990.blogspot.com/?m=1 ] staff are responsible for any visitors they bring into the office and are expected to be present for their guest’s arrival, or have prepared another person to receive them. No visitors should be given unsupervised access, and all staff should be vigilant against "tail-gating" or using another staff member's access code, card or key to gain entry to the office. Please also note the following rule: something else Any questions about [organisation-https://marathimanase1990.blogspot.com/?m=1 ] office security issues should be directed to SAI RAM, [office-security-contact-role]. You can email SAI RAM at sair48515@gmail.com. something else [organisation- https://marathimanase1990.blogspot.com/?m=1 ] staff are expected to secure their home office using the following method: something else Network Security To ensure that the WiFi access is restricted to authorised staff, [organisation- https://marathimanase1990.blogspot.com/?m=1 ] rotates the password at every security review and the new credentials will be made available to you by [security-contact-sair48515@gmail.com ]. When using the internal network, you can expect to find the following security measures in place. You will need a password in order to gain access, which can be obtained from [security-contact-sair48515@gmail.com ]. Your web browser can provide a window into your online activities, potentially exposing confidential data such as activist identities and [organisation- https://marathimanase1990.blogspot.com/?m=1 ] project details. To mitigate this, we recommend implementing the following security hygiene techniques in your browser: - clear cookies Automatic updates simply ensures that your software is updated quietly in the background, so there is less chance of it being out-of-date and therefore vulnerable to exploits. On occasion, the latest software version may be unstable, in which case you will be informed to prevent the update. Appendix General Advice Pay attention to any changes in encryption standards, data breaches or security vulnerabilities that are in the news and relevant to your communication platforms. Be aware that touchscreen devices are susceptible to holding fingerprint marks which can be used to guess recently-used key sequences. Plan to test your backups on a regular basis! In an ideal world you might never have to restore from backup, but the last thing you want to find during an emergency is that your backups are corrupted or incomplete. Be sure to discuss any recent data loss or similar incidents at each review - they are good learning opportunities. An approach to backups is the 3-2-1 rule: at least 3 backup copies of your data on at least 2 different kinds of medium, with at least 1 of these stored offsite. EFF wrote a Border Search Pocket Guide, which may be useful: https://www.eff.org/document/eff-border-search-pocket-guide Depending on the country in which you're operating it may be advisable to recommend using VPNs and similar tools even when staff are not travelling. The locks that are built into standard office furniture can be quite easy to force, which may be an acceptable risk when a visual deterrent is all that’s required, but it is worth considering options that can have a padlock or other additional security measures added to them. Between reviews, keep a note of any security incidents related to the office environment as these experiences teach those involved, the organization as a whole and can be used to improve the security policy. Between reviews, keep a note of any security incidents related to working remotely as these experiences teach those involved, the organization as a whole and can be used to improve the security policy. Review Checklist Is Message still the most appropriate method for your direct communications? Is your physical storage still in good working order or is it time to upgrade? Are daily backups still frequent enough or do you need backups throughout the day? Are the travel devices up-to-date with the latest security features? If not, they should be updated or upgraded. Is another VPN still the best option for protecting the internet activity of staff members? Is the free another VPN plan still sufficient or is there a better option now available? Is SAI RAM still the most appropriate person to contact for travel assistance? Is SAI RAM's email address up-to-date? Is SAI RAM still responsible for this policy? Is sair48515@gmail.com the most-up-to-date email for [security-contact-name]? It's time to change the office WiFi passwords! Implementation Tips Mark your calendar for review dates on 26 May 2024, 26 May 2025, 26 May 2026 A quick temporary alternative to webcam covers can be made from a post-it note or sticky-taped paper over the camera. There are physical storage devices available which offer additional security measures, such as keypads – but be sure to keep them in a protective case to prevent accidental damage that could corrupt or wipe the data. It may be sensible to time automatic backups for after the majority of the day's work has been done. When providing a travel phone to staff, consider the SIM card management: will it be provided for use around the world, or should they purchase locally? Remember to check that your devices are backed up before removing data as part of your travel preparations. Using the free plan may result in some compromises on speed or be ad-supported so consider whether the benefits offset these. It can be hard to keep a clean desk during working hours, so encourage staff to have meetings in designated spots, rather than at their desks. Useful Links Privacy tips for Android: https://spreadprivacy.com/android-privacy-tips Privacy Badger website: https://www.eff.org/privacybadger HTTPSEverywhere website: https://www.eff.org/https-everywhere PasswordSafe website: https://www.pwsafe.org Google Endpoint Management: https://gsuite.google.com/products/admin/endpoint Everyday practices Use Message for direct 1-1 messaging. Protect your accounts: use PasswordSafe to generate and store your passwords! Add an extra layer of security to your accounts by enabling two-factor authentication that sends your code by phone call or SMS. Done for the day? Don’t forget to clear any devices or sensitive documents from your desk. Before leaving the office, remember to check that your another storage option is locked (and remove/scramble the key). SAI RAM ([office-security-contact-9970654902]/sair48515@gmail.com) is the person to go to with any issues related to office security. Please note: it is recommended that this policy undergoes a legal review prior to being implemented in your organization. Built with SOAP v. 1.2.0