Editing Security Policy

💡 **Data security** stands as one of the utmost priorities in our operations, especially considering our close collaboration with clients who entrust us with access to their advertising accounts and confidential information. Adhering to high security standards is not just a requirement but an integral part of our professional responsibility.

Each of us has access to valuable information trusted to us by our clients. Observing security rules helps us maintain our clients' trust, ensure the integrity and confidentiality of their data, and successfully accomplish assigned tasks.

Given the remote nature of our work, security rules undoubtedly hold special significance. This document outlines key guidelines and instructions for ensuring data security, as well as norms of online behavior that must be strictly followed by all team members.

The following rules are mandatory for all employees and are intended to ensure data security and efficient work in a remote work environment.

== General Provisions ==
* '''Data Confidentiality:''' Adhere strictly to confidentiality when dealing with company data, including client and project information. Do not disclose confidential information.
* '''Responsibility for Account Credentials:''' Do not share account credentials with individuals outside the company. Follow data exchange guidelines.
* '''Use of Social Media:''' Refrain from posting confidential work-related or colleague-related information on social media. Maintain professionalism in online communication.
* '''Device Protection:''' Ensure the presence of antivirus software and a firewall on your devices.
* '''Software Updates:''' Regularly update operating systems and software to minimize vulnerability risks.
* '''Strong Passwords:''' Use strong and unique passwords for all work and personal accounts. Update passwords when employees leave.
* '''Two-Factor Authentication:''' Enable two-factor authentication for all accounts where possible for an additional layer of security.
* '''Access Control:''' Follow the principle of least privilege, granting access only to necessary information and resources.
* '''Reporting Violations:''' Immediately report any suspicious events, attacks, or data loss to the supervisor or project manager.

== Internet Safety Rules ==
* '''Network Security:''' When working remotely, ensure the security of your home internet connection. Use secure networks for handling confidential information.
* '''Use Secure Connections:''' When working with online services and platforms, use secure (https) connections to prevent interception of confidential information.
* '''Email and Phishing:''' Exercise caution when opening emails, especially from unfamiliar senders. Do not respond to suspicious requests or provide personal information via email. Verify the authenticity of links and attachments, especially if they come from unknown sources.
* '''File Downloads:''' Before downloading files from the internet, ensure their safety. Use only official and verified sources.

== Security Rules for Working with Ad Accounts ==
* '''Access Control:''' Restrict access only to employees whose responsibilities include working with advertising. Maintain an up-to-date list of individuals with access.
* '''Trusted Email Domains:''' Send invitations to join only to people with trusted email domains.
* '''Two-Factor Authentication:''' Require all individuals with access to have two-factor authentication set up.
* '''Management of Active and Inactive Users:''' Periodically review the list of people with access and remove inactive users.
* '''Monitoring Activity:''' Monitor activity in advertising accounts closely. Investigate any suspicious actions (e.g., suspicious individuals with access, campaigns, etc.) immediately.
* '''External Device Security:''' When using personal devices for work, ensure their security and compliance with company standards.
* '''Phishing Protection:''' Be vigilant against phishing attempts, especially in emails suggesting changes to account credentials.
* '''Compliance with Platform Standards:''' Adhere to all security rules and standards provided by advertising platforms.

== Security Platform Standards ==
=== Google & Microsoft Security ===
* [https://support.google.com/accounts/answer/46526?hl=en Google Account Security]
* [https://support.google.com/google-ads/answer/12864186?hl=en Google Ads Security]
* [https://support.microsoft.com/en-us/account-billing/how-to-help-keep-your-microsoft-account-safe-and-secure-628538c2-7006-33bb-5ef4-c917657362b9 Microsoft Account Security]
* [https://help.ads.microsoft.com/apex/index/3/en/52087 Microsoft Ads Security]

=== Social Media Security ===
* [https://www.facebook.com/business/help/608572510632070 Meta Business Manager Security]
* [https://www.facebook.com/business/news/tips-to-keep-your-facebook-account-and-business-page-secure Facebook Page Security]
* [https://www.facebook.com/business/news/tips-to-keep-facebook-instagram-business-accounts-secure Meta Security Tips for Remote Workers]
* [https://about.instagram.com/blog/announcements/keeping-instagram-safe-and-secure Instagram Account Security]
* [https://support.tiktok.com/en/safety-hc/account-and-user-safety/account-safety TikTok Account Security]
* [https://ads.tiktok.com/help/article/protect-account-tiktok-for-business?lang=en TikTok Ads Security]
* [https://www.linkedin.com/pulse/linkedin-how-secure-your-profile-10-steps-guide-xavier-degraux/ LinkedIn Account Security]
* [https://help.twitter.com/en/safety-and-security/account-security-tips Twitter Account Security]
* [https://help.pinterest.com/en/article/protect-your-account Pinterest Account Security]
* [https://reddit.my.site.com/helpcenter/s/article/Reddit-Security-Measures Reddit Ads Data Security]

=== Website Security ===
* [https://www.wpbeginner.com/wordpress-security/ How to Secure Your WordPress Site]
* [https://wordpress.com/support/security/ WordPress Tips on How to Keep Your Site Safe and Secure]
* [https://webflow.com/blog/website-security-checklist How to Secure Your Webflow Site]
* [https://university.webflow.com/lesson/password-protect-your-site-or-web-pages?topics=site-settings Webflow Password Protection]

''We appreciate your attention to this matter and strongly urge compliance with all suggested norms and security rules to ensure the seamless operation of our team and strengthen the trust of our clients!''