at It’s Crazy, we are committed to maintaining the highest standards of cyber security to protect our customers, employees, and systems from potential threats. This Cyber Security Policy outlines the principles, responsibilities, and controls in place to ensure the confidentiality, integrity, and availability of all data handled by our platform.
Legal Compliance
It’s Crazy adheres to all applicable cyber security, privacy, and data protection laws, including but not limited to the Information Technology Act (India) and relevant data protection regulations (such as GDPR principles).
We continuously review our practices to maintain compliance with evolving legal and regulatory requirements.
Access Control
- Access to sensitive systems and data is restricted to authorized personnel only.
- Strong authentication mechanisms, including robust passwords and multi-factor authentication, are implemented to prevent unauthorized access.
- User access rights are reviewed and updated regularly following the principle of least privilege.
Data Protection
- All sensitive data transmitted or stored is protected using encryption and secure communication protocols (SSL/TLS).
- Regular data backups are performed to ensure recovery in case of system failure or cyber incidents.
- Access to confidential information is limited strictly on a need-to-know basis.
Secure Development
- The development of It’s Crazy’s website and systems follows secure coding practices to minimize vulnerabilities.
- Regular security assessments, code reviews, and penetration testing are conducted to identify and mitigate risks.
- All third-party software, plugins, and integrations are evaluated for security compliance before implementation.
Incident Response
- A documented incident response plan is in place to manage and mitigate security incidents efficiently.
- All incidents are logged, analyzed, and reported according to internal procedures.
- Communication channels are established to notify affected users and stakeholders promptly in case of any data breach or threat.
User Awareness and Training
- We conduct regular awareness programs to educate users and employees on cyber security best practices, such as recognizing phishing, malware, and social engineering attacks.
- Employee training sessions are held periodically to reinforce adherence to internal security policies.
Monitoring and Logging
- Real-time monitoring systems are deployed to detect, alert, and respond to unusual or unauthorized activities.
- Audit logs are maintained to track access, user actions, and system events for investigation and compliance reporting.
Physical Security
- Physical access to servers, network infrastructure, and storage systems is restricted to authorized personnel only.
- Our data centers and hosting environments use surveillance systems, access control, and secure facilities to safeguard assets.
Compliance and Review
- This Cyber Security Policy is reviewed and updated periodically to ensure its continued effectiveness.
- Compliance with this policy is mandatory for all employees, contractors, and third-party partners associated with It’s Crazy.
- By adhering to this policy, we ensure a safe and secure online environment for our users, maintaining their trust and protecting their data integrity.
Contact Information
It’s Crazy
Email: malhar@bintech.services
Phone: +91-7574 05 2121, +91-97238 16597
Address: 401 Samedh Complex, Panchwati Cross Road, Ahmedabad, Gujarat – 380009, India.