Security Policy
This Security Policy summarizes core controls, security commitments, and operational practices used to protect IRU Shield systems and customer-facing services.
1. Security safeguards
- Authentication and role-based access controls for platform administration.
- Encryption in transit for service communications and administrative connections.
- Safeguards for build, release, update, and patching workflows.
- Monitoring for suspicious activity, abuse indicators, and operational anomalies.
2. Incident response
IRU Shield maintains incident handling processes intended to identify, assess, contain, investigate, and remediate security events. Incident timelines and notification practices may vary depending on severity, legal requirements, and enterprise commitments.
3. Access management
Administrative access should be restricted based on need, role, and operational necessity. Elevated privileges should be reviewed periodically and removed when no longer required.
4. Logging and review
Security-relevant actions may be logged for protection, troubleshooting, forensics, fraud prevention, and compliance reporting. Audit retention may vary by plan and environment.
5. Shared responsibility
IRU Shield protects the service platform, but customers remain responsible for endpoint hygiene, account security, internal policies, local device controls, and timely response to alerts generated in their own environment.