11. POLICY MAINTENANCE
This policy is reviewed annually (or immediately after any major incident or regulatory change) by the Information Security Committee. Changes are version‐controlled in our docs-as-code repo and published to our site.
DATA ACCESS MANAGEMENT POLICY
Last updated
2raywall Solutions Inc. (“Company,” “we,” “us” or “our”) is committed to ensuring that access to all data—whether customer, internal or system—is granted, monitored and revoked in a secure, auditable manner. This Data Access Management Policy describes who may access what data, under which conditions, and how those privileges are maintained.
TABLE OF CONTENTS
1. PURPOSE
2. SCOPE
3. DEFINITIONS
4. ROLES & RESPONSIBILITIES
5. DATA CLASSIFICATION
6. ACCESS REQUEST & PROVISIONING
7. ACCESS REVIEW & RECERTIFICATION
8. ACCESS REVOCATION
9. MONITORING & AUDITING
10. EXCEPTIONS
11. POLICY MAINTENANCE
12. CONTACT INFORMATION
1. PURPOSE
To establish consistent controls for granting, reviewing, and revoking user and system access to all data repositories in order to protect confidentiality, integrity and availability.
2. SCOPE
Applies to all employees, contractors, vendors and automated services that access Company data stores (databases, file systems, analytics platforms, backups, logs, etc.) in AWS, DigitalOcean or other environments.
3. DEFINITIONS
4. ROLES & RESPONSIBILITIES
5. DATA CLASSIFICATION
All data is classified as Public, Internal, Confidential or Restricted in accordance with our Privacy Policy. Classification determines approval workflows and technical controls.
6. ACCESS REQUEST & PROVISIONING
7. ACCESS REVIEW & RECERTIFICATION
8. ACCESS REVOCATION
9. MONITORING & AUDITING
10. EXCEPTIONS
Any exceptions must be documented, approved by the CISO, and tracked in our GRC platform. Temporary exceptions automatically expire after 30 days.
11. POLICY MAINTENANCE
This policy is reviewed annually (or immediately after any major incident or regulatory change) by the Information Security Committee. Changes are version‐controlled in our docs-as-code repo and published to our site.
12. CONTACT INFORMATION
If you have questions or comments about this policy, you may email us at info@2raywall.com or by post to:
2raywall Solutions Inc.
18117 Biscayne Blvd Suite 201
Miami, FL 33160
United States