Information Security Policy

CloudCo Solutions Limited Information Security Policy

CloudCo Solutions is committed to protecting the confidentiality, integrity, and availability of the information we process whilst providing recruitment services.

This policy outlines the technical and organisational measures we use to safeguard personal and business data in line with UK GDPR and the Data Protection Act 2018.

Scope

This policy applies to:

• All employees and contractors of CloudCo Solutions
• All systems used to process company, client, and candidate data
• All locations where company data is accessed or stored

Key Security Principles

Access control

• Access to systems is limited to authorised staff only.
• Permissions are granted on a least-privilege, need-to-know basis.
• Access is removed promptly when staff leave or change roles.

Passwords and authentication

• Strong passwords are required for all systems.
• Multi-factor authentication is enabled wherever available.
• Password sharing is prohibited.

Devices and remote working

• Work devices are protected by passwords and screen locks.
• Devices must not be left unattended in public places.
• Only approved cloud systems may be used to store or process company data.

Secure systems and storage

• Cloud-based platforms with encryption and access controls are used.
• Data is not stored on personal devices or unapproved services.
• Regular backups are maintained where applicable.

Confidentiality

• All staff are bound by confidentiality obligations.
• Personal data is only shared where necessary for recruitment services or legal compliance.

Data Breach Management

CloudCo Solutions maintains procedures to:

• Identify and contain suspected data breaches
• Assess risk to individuals
• Notify affected clients and the Information Commissioner’s Office where legally required
• Record and review incidents to prevent recurrence

Training and awareness

• Staff receive GDPR and data-protection awareness training.
• Security responsibilities form part of onboarding for new starters.

Policy review

This policy is reviewed annually or following significant business or regulatory change.