Policy Document
Effective date: May 29, 2026
Control Baseline
- Least-privilege access, MFA controls, and role-bound administrative rights.
- Segmentation, endpoint security, and monitoring workflows for risk reduction.
- Change-management and approval workflows for production-impacting actions.
Incident Handling
- Priority-based triage, root-cause documentation, and customer communication cadence.
- Escalation routing for critical alerts and suspected compromise events.
Customer Shared Responsibility
- Some controls require customer-side participation such as policy approvals and user training.
- Final risk acceptance remains with the data owner organization.
Need clarification? Contact alok@tekvista.in with your company name, applicable policy, and commercial reference.
Compliance note: This page provides policy-level guidance and does not replace professional legal advice.