Security Policy

Objective:
The objective of managing information security is to ensure that QuickBook.co.in’s core and supporting business operations continue to operate with minimal disruptions and without compromising data integrity, confidentiality, and availability.

QuickBook.co.in is committed to maintaining a robust Information Security Management System (ISMS) that aligns with the company’s strategic business objectives, providing a secure environment for customers, employees, and partners alike.

Commitment:
QuickBook.co.in, as a part of Sofia Online Travel Corporation Pvt. Ltd., is dedicated to protecting its information assets from all potential threats in order to:

• Maintain the confidentiality of sensitive information.
• Ensure the integrity of all data and information processing.
• Ensure the availability of essential information when needed.
• Comply with legal, regulatory, statutory, and contractual obligations.
• Foster continuous improvement in its Information Security Management System (ISMS).

Information Security Goals:
Information Security translates to the preservation of the following core objectives:

1. Confidentiality: Ensuring that information is accessible only to those authorized to have access.
2. Integrity: Ensuring the completeness, accuracy, and reliability of information and its processing methods.
3. Availability: Ensuring that authorized users have timely access to information and associated assets when required. This is achieved by the regular maintenance of hardware, updated and monitored operating systems, redundant critical resources, business continuity management, capacity management, and other information security measures.

Security Measures: QuickBook.co.in shall:

I. Develop and implement an Information Security Management System (ISMS): The ISMS will safeguard the organization’s information and systems from internal and external threats, ensuring that all business operations are protected against security risks.

II. Compliance: QuickBook.co.in commits to adhering to all relevant regulatory, legal, and business requirements, ensuring the highest standards of data security.

III. Ensure Confidentiality, Integrity, and Availability: We shall safeguard the confidentiality, integrity, and availability of information assets, applying strict controls to protect them from unauthorized access, modification, and destruction.

IV. Communication of Security Policies: We will communicate all pertinent security policies to employees, contractors, vendors, and other interested parties as applicable, ensuring they understand and comply with the company’s security practices.

V. Risk Assessment: QuickBook.co.in will identify and assess its information assets to understand potential vulnerabilities and the threats they may face. Through risk assessments, we will determine where the risks lie and take steps to mitigate them effectively.

VI. Risk Mitigation: We will mitigate identified risks by implementing appropriate controls as documented in the risk treatment plan. These measures will be continuously evaluated to ensure they remain effective.

VII. Employee Awareness: QuickBook.co.in will ensure that all employees receive annual security awareness training, keeping them informed about best practices and potential security threats.

VIII. Access Control: We will provide appropriate access controls to ensure protection against unauthorized access to sensitive information, maintaining strict adaptability and flexibility in line with operational needs.

Scope of the Security Policy:
The QuickBook.co.in Security Policy applies to all employees, contractors, vendors, and other third parties who interact with or have access to the company’s information systems. This policy provides a comprehensive, risk-based framework for protecting the organization’s data and ensuring the safety of its operations.

By fostering a culture of security and implementing these guidelines, QuickBook.co.in seeks to provide a safe and secure environment for its customers, employees, and business partners, protecting all relevant information assets from potential risks and threats.

This Security Policy forms the foundation for QuickBook.co.in’s commitment to safeguarding its operations and continuously enhancing its security practices in line with emerging risks and challenges.