Cybersecurity and Information Security policy framework
Policies
Technological Resources Usage Policy
Standards
02. Databases - Security criteria for development and implementation of databases.
03. Encryption - Criteria for the implementation of encryption Technologies.
04. Access Control - Access management for applications and information systems.
05. Information System Configuration and Change Control - Minimum requirements to be enforced in the management and control of technological means in endpoints.
06. Portable Devices - Principles and required measures to safeguard the confidentiality, integrity, and availability of information accessed or processed via mobile devices.
07. Backup Management - Security criteria for backups.
08. Incident Management - Incident Response Management.
09. Systems Laboratories - Security guidelines for information system test environments.
10. Network Security Standard - Security criteria for network deployment and interconnection and the security guidelines for wireless network environments.
11. Password Security Standard - Minimum principles that passwords must comply with.
12. Privacy on FCC Group - Basic principles that must be observed and complied with in the processing of Personal Data by the FCC Group Entities.
13. Software Development Security - Standard applicable to projects involving the development and maintenance of applications and software used across the FCC Group.
14. Information Security Policy for External Companies - Security criteria applicable to the procurement of services from third party companies outside the FCC Group.
15. Document Security - Security principles in the management of documents.
16. Physical Security of Installations - Security principles to be enforced in FCC facilities where information is processed.
17. Information Security Roles and Responsabilities Standard - Roles and Responsibilities for Information Security.
18. Return and Disposal of Technological Media Standard - Actions to be undertaken upon the termination a person who has been assigned equipment owned by the FCC Group.
19. GDPR Compliance - Principles and minimum requirements to be complied with by the FCC Group entities to which this Regulation applies.
20. Use of Cookies - Guidelines for managing the use of cookies on websites under the FCC Group domains.
21. Security Monitoring - Requirements for the monitoring of security events in information systems.
22. Domain registration and management – Standard applicable to FCC Group domain registration and management.