Information Security Policy

Our Commitment to Information Security

At Sudish’s Institute of Waterproofing and Insulation (“SIWIN”), we recognize the importance of protecting the confidentiality, integrity, and availability of information entrusted to us by our clients, partners, employees, and stakeholders.

As a professional consultancy organization, we are committed to maintaining robust security practices that safeguard business information, project data, client records, and digital assets against unauthorized access, disclosure, alteration, or destruction.

Information Protection

SIWIN implements appropriate administrative, technical, and physical safeguards to protect information under our control. These measures include:

  • Controlled access to information systems and business applications.

  • Secure authentication and password management practices.

  • Regular software and security updates.

  • Data backup and recovery procedures.

  • Protection against malware, phishing, and other cyber threats.

  • Secure storage and transmission of sensitive information.

Employee Responsibility

All employees, consultants, interns, and authorized personnel are required to:

  • Maintain the confidentiality of client and company information.

  • Follow established security policies and procedures.

  • Use company-provided devices and systems responsibly.

  • Report suspected security incidents immediately.

  • Comply with applicable legal, regulatory, and contractual requirements.

Data Privacy and Confidentiality

SIWIN respects the privacy of all stakeholders and handles information responsibly.

Confidential information received during consulting assignments, training programs, assessments, inspections, audits, and project execution is protected and used solely for legitimate business purposes.

We do not sell, rent, or disclose confidential client information to third parties without proper authorization unless required by law.

Device and Network Security

To maintain a secure working environment, SIWIN:

  • Uses licensed and updated software.

  • Implements endpoint protection and anti-malware solutions.

  • Monitors systems for potential security threats.

  • Restricts unauthorized software installation.

  • Promotes secure use of email, cloud services, and collaboration platforms.

Cybersecurity Awareness

SIWIN regularly promotes cybersecurity awareness among employees and associates to help identify and prevent:

  • Phishing attacks

  • Social engineering attempts

  • Malware and ransomware threats

  • Unauthorized access attempts

  • Data leakage incidents

Incident Management

Any suspected or confirmed information security incident is investigated promptly. Appropriate corrective and preventive actions are implemented to minimize impact and prevent recurrence.

Third-Party Security

Where applicable, SIWIN works with trusted service providers and technology partners who maintain appropriate security standards and practices.

Continuous Improvement

Information security is an ongoing process. SIWIN periodically reviews and improves its security controls, procedures, and awareness initiatives to address evolving business and cybersecurity risks.

Contact

For any information security concerns, vulnerability reports, or security-related inquiries, please contact:

SIWIN Consultants Private Limited
Email: info@siwinonline.com
Website: www.siwinonline.com