5. Information Security Policy
Addressing information security as a core management priority to deliver highly reliable services.
Quantum Mesh Inc. (hereinafter "the Company") recognizes that protecting information assets entrusted by customers and business partners is a vital executive responsibility. To ensure confidentiality, integrity, and availability, we maintain the following security management framework:
Basic Policy
Information security serves as the foundation of our business operations. We strictly comply with laws, contractual obligations, and internal regulations, implementing robust security measures against identified risks.
Executive Responsibility
Management actively drives information security governance, establishing necessary rules, operational procedures, clear roles, and resource allocations.
Information Asset & Data Management
Information assets are classified (Public, Internal Use, Confidential) based on sensitivity and purpose. Access is limited on a need-to-know basis. Storage and transmission data are protected via encryption and access controls. Data retention and secure disposal comply with contractual and legal mandates.
Access & Privilege Controls
Access to systems and data follows the principle of least privilege. Strong authentication, access controls, and logging prevent unauthorized access. User privileges are promptly revoked upon employee transfer, resignation, or contract termination.
Technical Security Measures
We implement comprehensive technical controls including access controls, privilege management, log monitoring, vulnerability patching, automated backups, and malware protection across systems and cloud environments.
Vendor & External Service Management
Subcontractors and cloud service providers undergo thorough security evaluations, contractual safeguards, and ongoing supervision regarding data storage, access controls, and incident response.
Incident Response
We maintain incident response procedures for early detection, containment, reporting, and recovery. In the event of a security incident, immediate containment is enacted, and affected customers/regulators are notified in accordance with applicable laws.
Vulnerability Reporting
Vulnerabilities discovered within our services or website may be reported via our Inquiry Form. Security researchers must refrain from unauthorized access, service disruption, or data alteration during verification.
Business Continuity (BCP)
Prioritizing human safety, the Company maintains business continuity plans (BCP) leveraging multi-region distributed data center infrastructure to ensure rapid disaster recovery and service resilience.
Education, Audit, and Continuous Improvement
Ongoing security training is conducted for all employees. Internal audits and management reviews are regularly performed to adapt to evolving technological threats and regulatory changes.
ISMS Certification
The Company maintains an Information Security Management System (ISMS) certified under ISO/IEC 27001:2022:
- Certification Standard: ISO/IEC 27001:2022
- Registration No.: GIJP-2124-IC
- Certification Body: G-CERTi
- Accreditation: IAS MSCB-113
Contact Window
For inquiries regarding our information security practices, please reach out via our website Inquiry Form.