Information Security Policy

1. Purpose

McWhite Solutions S.R.L. is committed to protecting the confidentiality, integrity, and availability of information entrusted to the company by its clients, partners, and employees. This Information Security Policy establishes the principles and practices used to safeguard information assets and systems.

2. Scope

This policy applies to all employees, contractors, consultants, and third parties who access or process information on behalf of McWhite Solutions.

3. Protection of Information Assets

McWhite Solutions implements appropriate technical and organizational measures to protect sensitive information, including:

• secure access to systems and applications
• protection of client data and intellectual property
• safeguarding credentials and authentication mechanisms
• use of secure communication channels when handling confidential data

Access to systems and information is granted only to authorized individuals based on business needs.

4. Access Control

Employees and contractors must use company systems responsibly and only for legitimate business purposes.

Access to client systems or data is granted strictly on a need-to-know basis and must comply with the security policies of the respective client organizations.

Passwords and authentication credentials must be protected and never shared with unauthorized individuals.

5. Device and System Security

All devices used to access company or client systems must be maintained with appropriate security protections, including:

• up-to-date operating systems and security patches
• antivirus or endpoint protection solutions
• secure configuration and access controls

Where applicable, remote access to systems must use secure methods such as VPN or other encrypted channels.

6. Incident Management

Any suspected security incident, data breach, or unauthorized access must be reported promptly to company management.

McWhite Solutions will investigate security incidents and take appropriate actions to mitigate risks and prevent recurrence.

7. Confidentiality

Employees and contractors must treat all client information, proprietary materials, and internal company data as confidential unless explicitly authorized otherwise.

Confidential information must not be disclosed to third parties without proper authorization.

8. Policy Compliance

Failure to comply with this Information Security Policy may result in disciplinary action or termination of contractual relationships.

McWhite Solutions regularly reviews its information security practices to maintain a high level of protection for client and company data.