Information Security Policy

1. Introduction

This Information Security Policy establishes the principles and responsibilities for safeguarding

viaSocket's data and systems.

2. Purpose

The purpose of this policy is to protect the confidentiality, integrity, and availability of data handled

by viaSocket.

3. Scope

This policy applies to all employees, contractors, and third-party vendors who handle viaSocket

data.

4. Security Controls

- Access Control: User accounts and roles are managed carefully to limit access to data based on

job responsibilities.

- Data Protection: Data is protected by encryption and secure storage.

- Incident Response: viaSocket has an incident response procedure in place to quickly handle

security incidents.

- Physical Security: Physical access to office spaces and servers is restricted.

- Employee Awareness: Employees receive security awareness training.

5. Roles and Responsibilities

- Security Officer: Responsible for overseeing security program implementation and compliance.

- Employees: Expected to follow security policies and report incidents.

6. Policy Review

This policy is reviewed annually and updated as needed.