Security Policy

Treatment of Information

Version 1.0 - 23.11.2015
Document Maintainer - Howard Fuhs
Maintaining Department - xyz


Information is nowadays the most important raw material and the most effective basic working material of a company. Although we work with many kinds of information on a daily basis, many users do not realise the dangerous properties of information.

Information, even when stolen can exist in two places at once as they are immaterial goods which can be copied at will. Often the theft is not even noticed or cannot be proven without doubt. It is therefore essential to treat information responsibly. Only in this way can one ensure that no harm is done to the company. Through your work and character ethics ensure that internal business information does not reach unauthorised persons.

Note legal requirements (e.g. the Federal Data Protection Law, copyright, penal code) when working with and passing on information.

Note that ALL information that has not been cleared for publication explicitly remains confidential to the business which is forbidden to be passed on. This holds especially for information from the company intranet.

Data and information published in the company intranet are only intended for internal company purposes and must not be made available to unauthorised persons.

Publication of data via the intranet, internet, company brochures, product catalogues or specific articles have to be permitted in advance by managers.

Confidential, strictly confidential or personal information or data must be treated carefully and conscientiously.

Lock cupboards and drawers when finishing work.

Do not leave documents on your desk. Lock up all documents in cupboards and drawers.

It is no use locking the office when after work people like cleaners can gain access unimpeded and unsupervised.

As long as confidentiality cannot be ensured, all discussions about confidential information in public places (like restaurants, buses, underground, railways and planes) must not take place.

Make sure in discussions that you do not pass on more information to your partner than is absolutely necessary.

The internal company telephone directory not only gives the direct numbers of individuals in the company, but also is an indication of the internal organisational structure of the company. For this reason it is necessary to classify and treat the directory as confidential.