Information Security Policy

Version: 1.0
Effective Date: 14 October 2026

​

1. Purpose

HG IP Networks Ltd is committed to protecting the confidentiality, integrity and availability of information entrusted to us by our customers, suppliers and business partners.

This policy establishes the principles and controls used to safeguard company and customer information from unauthorised access, disclosure, alteration, loss or destruction.

 

2. Scope

This policy applies to:

HG IP Networks Ltd
Employees
Contractors
Consultants
Suppliers with authorised access to company information

It covers all information processed, stored or transmitted by HG IP Networks Ltd.

 

3. Information Security Objectives

HG IP Networks Ltd aims to:

Protect customer and company information.
Maintain compliance with UK GDPR and applicable legislation.
Prevent unauthorised access to systems and data.
Reduce cyber security risks.
Ensure business continuity where possible.
Promote a security-conscious culture.

​

4. Access Control

Access to systems and information will be granted on a least-privilege basis.

Users must:

Use individual accounts.
Keep passwords confidential.
Use strong passwords.
Enable Multi-Factor Authentication (MFA) where available.
Never share login credentials.

Access rights will be reviewed periodically and removed when no longer required.

 

5. Device Security

All company devices must:

Be protected with passwords or biometric authentication.
Use supported operating systems.
Receive security updates promptly.
Use anti-malware protection where appropriate.
Be encrypted where possible.

Lost or stolen devices must be reported immediately.

 

6. Data Protection

Personal data must:

Be processed lawfully and fairly.
Be used only for legitimate business purposes.
Be retained only as long as necessary.
Be protected against unauthorised disclosure.

All staff and contractors must comply with the company's Privacy Policy and applicable data protection legislation.

 

7. Email and Communications Security

Users must:

Exercise caution when opening email attachments.
Verify unexpected requests for payments or sensitive information.
Report suspected phishing attempts immediately.
Use approved communication platforms for business purposes.

 

8. Incident Reporting

Any suspected security incident must be reported without delay.

Examples include:

Unauthorised access
Data breaches
Malware infections
Phishing attempts
Lost devices
Accidental disclosure of information

Incidents will be investigated and appropriate corrective action taken.

 

9. Suppliers and Third Parties

HG IP Networks Ltd may engage trusted third-party suppliers.

Where suppliers process personal or confidential information, appropriate contractual and security controls will be implemented.

 

10. Backup and Recovery

Where applicable, systems and data will be backed up regularly to support business continuity and recovery from security incidents or operational failures.

 

11. Review

This policy will be reviewed annually or following any significant change to business operations, regulatory requirements or security risks.