Security
Information Security Policy
Candaply Limited is committed to protecting confidential, personal and commercially sensitive information.
Purpose
Candaply Limited is committed to protecting confidential, personal and commercially sensitive information.
Security objectives
Our security programme is designed to ensure:
- Confidentiality
- Integrity
- Availability
Access control
Candaply implements:
- Unique user credentials
- Password security requirements
- Multi-factor authentication
- Role-based permissions
- Session management controls
Data protection
All candidate documents and personal data are protected using:
- Encryption at rest
- Encryption in transit
- Access restrictions
- Monitoring controls
Platform security
Candaply maintains:
- Secure cloud hosting
- Firewall protection
- Vulnerability monitoring
- Security patch management
- Backup procedures
Monitoring
Security monitoring includes:
- User activity logging
- Login monitoring
- Audit trail management
- Incident detection procedures
Security incidents
Any suspected security incident is investigated and managed in accordance with Candaply’s Data Breach Response Procedure.
Third-party providers
Candaply conducts appropriate due diligence on hosting and technology providers that process or store personal information.
Review
This policy is reviewed annually and updated where necessary.