Policies

At ESProfiler, we use Drata to track and manage company compliance policies. Each year, every employee is tasked with doing the following:

• Must review and acknowledge the below company policies
• Must complete the Security Awareness training in Drata.

The company policies stored and amanaged through Drata as as follows:

• Acceptable Use Policy
• Artificial Intelligence Policy
• Asset Management
• Backups
• Baseline Configuration Workstation
• Business Continuity Plan
• Change Management
• Code of Conduct
• Compliance
• Data Classification
• Data Protection
• Data Retention
• Disaster Recovery
• Drug & Alcohol
• Encryption
• ESProfiler Assurance
• Fire Evacuation Procedure
• Grievance
• Incident Response Plan
• Information Security Management System (ISMS) Plan
• Information Security
• IP Assigment
• Joiners, Movers & Leavers
• Logging and Monitoring
• Maternity & Family Leave
• Passwords
• Performance Improvement
• Physical Security Incident Process
• Physical Security Policy
• Responsible Disclosure
• Risk Assessment
• Secure Coding
• Software Development Lifecycle
• System Access Control
• Vendor Management
• Vulnerability Management
• Wellbeing Policy
• Whistleblowing Policy