Information Security Policy
Excel Cleaning Services Ltd is dedicated to maintaining the highest levels of security and confidentiality. This policy provides the framework for protecting the confidentiality, integrity, and availability of all data and information assets managed by the company, ensuring the highest level of security for our clients across the Isle of Man.
1. Purpose and Objective
The core objective of this policy is to safeguard all physical and electronic information utilized by Excel Cleaning Services Ltd against unauthorized access, theft, or disruption, maintaining consistent business operations and client trust.
2. Policy Scope
This policy applies to all personnel, including permanent employees, subcontractors, and temporary staff, as well as any third-party entities with authorized access to corporate or client-specific information.
3. Physical Security and Asset Protection
- Key Control: All client keys, fobs, and access codes must be stored in secure, Company-approved lockboxes when not in use.
- Clear Desk: No sensitive client information or internal business data should be left unattended or visible on desks or in vehicles.
- Site Closure: Staff must ensure that all doors and windows are correctly secured upon completion of cleaning services at client premises.
4. Digital Security and Data Handling
- MFA: All business accounts must be protected with complex passwords and multi-factor authentication (MFA).
- Least Privilege: System access is granted only to information necessary for specific staff roles.
- Credential Safety: Account credentials must never be shared between staff members.
5. Privacy and Legal Compliance
Excel Cleaning Services Ltd operates in full compliance with the Isle of Man Data Protection Act 2018. All client data and sensitive operational schedules are treated as strictly confidential information.
6. Incident Reporting
Any actual or suspected security incident—including the loss of a device or physical key must be reported to the Management Team without delay for investigation and remediation.
7. Regular Policy Review
This policy is a dynamic document and is subject to annual review by the management team to ensure it remains relevant to the evolving security landscape of the Isle of Man.