Data Security Policy

Introduction

The Data Security Policy (DSP) provides a structured approach to ensuring the confidentiality, integrity, and availability of data at Noble Moving & Storage. This policy applies to all employees, contractors, and partners who interact with our data systems in any capacity.

Noble Moving & Storage is committed to safeguarding the data of clients, employees, and partners from unauthorized access, alteration, disclosure, or destruction. It is the responsibility of all personnel to adhere to this policy and uphold the highest standards of data protection.

Purpose

This policy establishes the security measures and protocols necessary to:

• Protect the confidentiality, integrity, and availability of company data.
• Prevent unauthorized access, misuse, or compromise of Noble Moving & Storage’s data and systems.
• Ensure compliance with legal, regulatory, and contractual data security obligations.

By following this policy, all employees, partners, and third-party vendors contribute to a secure operating environment that reduces risk and enhances trust.

Scope and Applicability

This policy applies to all data, information systems, and business operations conducted by Noble Moving & Storage. It includes:

• All employees, contractors, and third-party vendors handling company data.
• All data storage, processing, transmission, and disposal activities.

All personnel must comply with this policy. Vendors and partners working with company data must also adhere to these security standards.

Policy Violations

Violations of this Data Security Policy may result in disciplinary action, up to and including termination of employment or business partnerships. Individuals found in violation of applicable local, state, federal, or international laws will be reported to the relevant authorities.

1.0 Information Security Program

Noble Moving & Storage maintains a comprehensive information security program designed to prevent unauthorized access or compromise. This program includes:

• Implementation of administrative, technical, and physical security controls.
• Regular security assessments and audits to maintain compliance.
• Oversight by senior management to ensure effectiveness.

1.1 Management Commitment to Security

Senior management at Noble Moving & Storage is dedicated to protecting information assets by:

• Treating data as a critical business resource.
• Establishing and enforcing robust security policies.
• Conducting annual risk assessments and external audits.

1.2 Security Leadership & Responsibilities

The Information Security Officer (ISO) is responsible for managing the security program, including:

• Developing and maintaining security policies.
• Overseeing incident response and risk management.
• Collaborating with auditors to assess security practices.

1.3 Security Awareness & Training

All employees must participate in security awareness training, including role-specific training for those handling sensitive data.

1.4 Risk Assessment & Security Controls

Security measures are determined through:

• Regular risk assessments.
• Penetration testing.
• Compliance with legal, regulatory, and contractual requirements.

1.5 Data Classification & Handling

Data is categorized based on sensitivity and protected accordingly. Categories include:

• Public (minimal security controls).
• Proprietary (internal use only).
• Restricted (access limited to authorized personnel).
• Highly Restricted (strictest security measures, including encryption).

1.6 Legal & Regulatory Compliance

Noble Moving & Storage complies with all applicable data security laws and regulations to protect company data and operations.

1.7 Audits & Compliance Reviews

Regular audits, both internal and third-party, ensure adherence to this security policy and industry best practices.

2.0 Access Control

Access to company systems is strictly controlled to prevent unauthorized data exposure.

2.1 User Access Management

• Access is granted on a need-to-know basis.
• User identities are managed centrally, and access is revoked immediately upon termination.
• Inactive accounts are disabled after 90 days.

2.2 Password & Authentication Standards

• Strong password policies enforced.
• Multi-factor authentication required for sensitive systems.
• Password sharing and insecure storage are strictly prohibited.

3.0 Operational Security

Defined security procedures protect Noble Moving & Storage systems and data from vulnerabilities.

3.1 System Hardening

Systems are hardened based on industry best practices, including:

• Removing unnecessary services and accounts.
• Enforcing encryption standards.
• Disabling default vendor accounts.

3.2 Patch Management

• Critical patches are applied immediately.
• General updates occur quarterly.
• All patches are tested before deployment.

4.0 Business Continuity & Disaster Recovery

A Business Continuity (BC) and Disaster Recovery (DR) plan is in place to restore operations after disruptions. This plan is tested annually to ensure readiness.

5.0 Incident Response

A structured Incident Response Plan ensures swift action in case of security breaches. The process includes:

1. Identification – Detect and assess the incident.
2. Containment – Prevent further damage.
3. Neutralization – Address the root cause.
4. Recovery – Restore affected systems.
5. Post-Incident Review – Improve future security measures.

6.0 Acceptable Use of Systems

All employees must adhere to the Acceptable Use Policy, which outlines proper handling of company systems and data.

6.1 Equipment & System Usage

• Lost or stolen company equipment must be reported immediately.
• Personal use of company devices is prohibited.

7.0 Vendor & Third-Party Management

Third-party vendors and partners must comply with Noble Moving & Storage data security standards. Vendor contracts will include clauses ensuring adherence to these security policies.

8.0 Regular Audits & Compliance Checks

Routine internal and third-party audits ensure compliance with the Noble Moving & Storage Data Security Policy and best practices.

By adhering to this Data Security Policy, Noble Moving & Storage ensures the protection of critical data, compliance with regulations, and resilience against security threats.