Policy status: Approved and actively followed. We apply remote-work device, identity and confidential-data handling safeguards. Effective April 11, 2026.
Purpose and scope
We protect information and devices during routine work, remote access and external collaboration.
This policy applies to personnel, contractors, technology and third parties acting for Pingplus Media to the extent of their approved access and applicable agreements. Customer and supplier responsibilities are aligned with our executed contracts and applicable law.
Controls and practices in operation
- We provide business access only through approved identities, endpoints and networks, with screen locking, supported OS security updates and appropriate endpoint protections.
- Our enforced employee acceptable-use and data-handling rules prohibit credential sharing and unauthorised disclosure of customer content through personal messaging, unmanaged cloud storage, public AI sessions or insecure channels.
- We administer production systems through approved VPN/SSH access, MFA where supported and controlled file transfers. Production database exports are subject to approved business purpose and data minimisation.
- Our active BYOD policy permits access to Confidential or Restricted information only from authorised devices meeting applicable security, device-management and owner-approval conditions. Access is denied where those conditions are not met.
- Employees and authorised contractors use the established incident-reporting channel to promptly report phishing, accidental disclosure, lost devices and suspicious access attempts.
- We handle portable media and printouts as classified data; use secure disposal and maintain records when Restricted material is destroyed.
Review and responsibility
At account/device onboarding; annually as part of awareness and on device incident.
Accountability and reporting
Our personnel, contractors and in-scope service partners follow this policy, with established channels for prompt reporting of suspected security issues. Exceptions are recorded, reviewed and approved by an authorised policy owner. Applicable customer contracts and legal duties continue to govern the services provided.