Editing Security Policy (section)

== Security Rules for Working with Ad Accounts ==
* '''Access Control:''' Restrict access only to employees whose responsibilities include working with advertising. Maintain an up-to-date list of individuals with access.
* '''Trusted Email Domains:''' Send invitations to join only to people with trusted email domains.
* '''Two-Factor Authentication:''' Require all individuals with access to have two-factor authentication set up.
* '''Management of Active and Inactive Users:''' Periodically review the list of people with access and remove inactive users.
* '''Monitoring Activity:''' Monitor activity in advertising accounts closely. Investigate any suspicious actions (e.g., suspicious individuals with access, campaigns, etc.) immediately.
* '''External Device Security:''' When using personal devices for work, ensure their security and compliance with company standards.
* '''Phishing Protection:''' Be vigilant against phishing attempts, especially in emails suggesting changes to account credentials.
* '''Compliance with Platform Standards:''' Adhere to all security rules and standards provided by advertising platforms.