Clue Digital Security Policy

1. Introduction
2. Security Threat Landscape
3. Security Policy and Governance
4. Access Control
5. Data Protection and Privacy
6. Data Security
7. Physical Security for Remote Work
8. Incident Response and Management
9. Security Awareness and Training
10. Conclusion

1. Introduction

Clue Digital Inc. understands the critical importance of security in today’s digital landscape. We
are dedicated to providing secure and reliable services to our clients, ensuring the protection of
their data and assets. This whitepaper outlines our comprehensive approach to security,
including policies, procedures, and technical measures implemented to safeguard our systems
and infrastructure.

2. Security Threat Landscape

The cybersecurity threat landscape is constantly evolving, with new threats and vulnerabilities
emerging regularly. Clue Digital Inc. remains vigilant against a variety of potential threats,
including malware, ransomware, phishing attacks, insider threats, denial of service (DoS)
attacks, and data breaches. Through continuous monitoring and analysis, we stay ahead of
emerging threats and adapt our security measures accordingly.

3. Security Policy and Governance

A robust governance framework is essential for effective security management. Clue Digital Inc.
maintains a comprehensive set of security policies and procedures that govern every aspect of
our operations. These policies cover areas such as acceptable use of assets, information
classification and handling, incident response, business continuity and disaster recovery, and
third-party risk management. Regular reviews and updates ensure that our policies remain
current and aligned with industry best practices.

4. Access Control

Controlling access to sensitive systems and data is crucial for preventing unauthorized access
and data breaches. Clue Digital Inc. employs a layered approach to access control, including
role-based access control (RBAC), multi-factor authentication (MFA), and the principle of least
privilege. Regular access reviews are conducted to ensure that access rights are appropriate
and up-to-date, minimizing the risk of insider threats and unauthorized access.

5. Data Protection and Privacy

Protecting the confidentiality, integrity, and availability of data is a top priority for Clue Digital Inc.
We employ a variety of measures to ensure data protection and privacy, including encryption of
data in transit and at rest, data loss prevention (DLP) controls, regular data backups, and
adherence to privacy policies. By prioritizing data protection and privacy, we aim to instill trust
and confidence in our clients.

6. Data Security

In addition to protecting data privacy, Clue Digital Inc. is committed to ensuring the security of
data against unauthorized access, alteration, or destruction. Our data security measures include
robust encryption algorithms, secure data transmission protocols (e.g., SSL/TLS), stringent
access controls and authentication mechanisms, and regular security audits and vulnerability
assessments. These measures help mitigate the risk of data breaches and uphold the
confidentiality and integrity of sensitive information.

7. Physical Security for Remote Work

With the rise of remote work, ensuring the physical security of employees’ work environments is
essential. Clue Digital Inc. provides guidance and resources to employees to help them create
secure home offices. This includes recommendations for securing home Wi-Fi networks, using
secure VPN connections for remote access, and implementing physical security measures such
as locking file cabinets and shredding sensitive documents.

8. Incident Response and Management

Despite our best efforts to prevent security incidents, we recognize that no system is completely
immune to threats. In the event of a security incident, Clue Digital Inc. has a structured incident
response process in place to minimize the impact and facilitate swift recovery. This process
includes incident detection and classification, containment and mitigation, forensic analysis,
communication and reporting, and post-incident review and analysis. By promptly responding to
incidents and implementing corrective actions, we strive to minimize disruption and maintain the
trust of our clients.

9. Security Awareness and Training

Our employees play a crucial role in maintaining our security posture. Clue Digital Inc. provides
comprehensive security awareness training to all employees, covering topics such as
recognizing phishing attempts, best practices for password management, secure use of
company assets, and reporting security incidents. By empowering our employees with the
knowledge and skills to identify and respond to security threats effectively, we strengthen our
overall security posture and reduce the risk of security breaches.

10. Conclusion

Clue Digital Inc. is committed to maintaining the highest standards of security to protect the
interests of our clients and stakeholders. Through the implementation of robust security policies,
advanced technologies, and ongoing training and awareness initiatives, we strive to stay ahead
of emerging threats and safeguard the confidentiality, integrity, and availability of data. By
prioritizing security and privacy in everything we do, we aim to build and maintain the trust and
confidence of our clients.

For further inquiries or to request additional information, please contact our security team at
security@cluedigital.com.