4Gid Policies

4Gid’s Quality Management Policy:

Policy Statement:
“4G is committed to design, develop and deploy foolproof and cost effective Identity Management Solutions that conform to customer requirements through continual improvement of technology and business processes”.

Scope:
“Design, Development, Supply, Deployment and Maintenance of Identity Management Solutions including Smart Cards and Biometric Devices”

Certification:
4Gid’s Quality Management System has been certified to ISO 9001 requirements since 2009. We are certified to ISO 9001:2008 standard with TUV SUD South Asia Private Limited. This accreditation is an important milestone in our quest for excellence in quality and customer satisfaction.

Objectives:

To understand our market and our customers’ needs and expectations
To comply with the requirements of ISO 9001:2008
To ensure continual improvement of Products, Solutions, Service and Processes.
To maintain a healthy, motivated workforce trained and developed to achieve their potential, and the company’s quality objectives.

4Gid’s Business Continuity and Disaster Recovery Policy

Policy statement:
4Gid is committed to safeguarding the interests of its customers and employees in the event of an emergency or significant business disruption. 4Gid has developed a Business Continuity and Disaster Recovery (BC&DR) Plan that addresses its response to the events that could significantly disrupt its business. The source of the disruption may be internal such as loss of key staff or systems failure, or it might be an external influence such as natural disasters, power outages, other extraordinary events or even the business failure of one of our key suppliers. The plan provides framework to recover key business systems and processes to be able to provide business critical functions and vital services.

Policies and Procedures:
4Gid has developed a set of operating policies and procedures that guide how the organization will manage its employees, facilities, mission critical systems and data files, and private and confidential data in the event of a significant business disruption or disaster occurring. There is a designated Business Continuity & Disaster Recovery (BC&DR) Team that is responsible for implementation of these policies and procedure in the organizaton. In the event of a significant business disruption that would render our current location inaccessible or inoperable, our BC&DR Plan directs the Team to first ensure the safety and security of all employees, to protect sensitive, private and confidential information regarding our cients, to protect other property and equipment that are critical to conducting business and then to restore business operations to normal at one of several predetermined alternative sites. The BC&DR Plan is maintained both at our main office location and Disaster Recovery Site.

Plan:
BC&DR Plan is designed to allow us to resume operations as quickly as possible depending on the scope and severity of the disruption.

The Plan addresses:

Business Impact Analysis
Identify mission critical systems, functions and processes
Assess both financial/non-financial impacts of these on the business
Evaluate and establish targeted recovery time objectives
BC&DR Team Members and their Responsibilities
Plan development and maintenance
Employee training
Plan testing
All aspects of the plans are periodically tested in accordance with regulatory requirements including crisis management and response, business continuity and critical infrastructure disaster recovery
Risk Management Practices
Computer workstations/servers/LAN – back-up and redundancies
Security of private and confidential client data files
Insurance coverage
Succession planning in the event of the absence of key personnel
Alternative locations for remotely operating the business, if necessary
Crisis Management Actions
Early preparedness, when possible
Emergency phase
When to and how to enact or execute the Plan
Action priorities
Communications with employees, customers and key stakeholders
Recovery Management
Data recovery plans
Systems recovery plans
Facilities recovery plans

Disclaimer

The plan is designed to work in many different emergency situations; but it is impossible to anticipate every potential disaster that could cause business disruption. Hence there can be no assurance that there will be no interruption of our business functions in all circumstances. Our business continuity plans are tested periodically to ensure readiness but such tests may not be able to replicate the actual conditions we experience in a real emergency.

4Gid’s Information Security Policy:

Policy Statement
“4GID protects all information assets with Confidentiality, Integrity and Availability. 4GID sincerely and honestly commits towards continual improvement of Information Security Management System with the help of Trained and Skilled Associates”.

Scope Statement for ISMS
“Information Security Management Systems for the processes of Design, Development, Supply, Deployment and Maintenance of Identity Management Solutions including Smart cards and biometric Devices”

Certification:
4Gid is an ISO 27001:2005 certified company which follows international standards to secure the information. In order to secure the information effectively 4Gid has adopted information security management system (ISMS).

Objectives:

To comply with the requirements of ISO 27001:2005 standards
To Establish Information Security Management System (ISMS)
To maintain the security of the organization’s information and information processing facilities that are accessed processed, communicated to, or managed by internal or external parties
To achieve and maintain appropriate protection of organizational assets and to ensure the information receives with an appropriate level of protection.
To minimize the risk of systems failures & data theft
To protect the integrity of software and information
To ensure the protection of information in networks and the protection of the supporting infrastructure
To prevent unauthorized access to networked services and to reduce risks resulting from exploitation of published technical vulnerabilities

Policy Manual
An ISMS Policy manual is defined & distributed to employees to follow the information security which covers the following topics

Implementation and operation of ISMS
Security Policy
Organizational Security
Asset Classification and control
Physical and Environmental Security
Communications & Operations Management
Access Control of organization
Systems Development and Maintenance
Reporting Information Security Events and Weakness

4Gid’s Environmental Policy:

“4Gid is committed to protection of environment by minimizing the impact of our business on environment and efficiently managing power, water and waste. We continuously strive to improve our responsibility towards environment by reducing pollution and minimizing waste generation”

We try to protect the environment through the following means:

Value the health, safety and environmental issues of employees, customers, suppliers and local community.
Consider environmental factors when procuring Goods and Services
Monitor carbon emissions resulting from consumption of power and implement continual improvement program to reduce the emissions.
Optimize energy usage in our office locations and data centers, and opt for renewable energy sources where feasible
Measure water usage and try to minimize the consumption of natural resources
Promote greenery within our office premises by planting trees in open spaces
Promote recycling of paper and reuse and reconditioning of used electronic items. In our organization, we promote reading electronically, encourage the use of recycled paper and discourage printing of emails, presentation and other materials.
We promote the use of solar power for biometric enrolment operations amongst our customers
Comply with the applicable environmental and related regulations
Communicate our Environmental Policy to all our employees, customers and suppliers