Data Security Policy

1. Introduction

NIMDAUDMSCSL is committed to ensuring the security and confidentiality of customer data. This Data Security Policy explains how we protect user information across our banking software, website, and mobile applications.

2. Information Security Objectives

• Protect customer data from unauthorized access
• Ensure confidentiality of financial information
• Maintain data integrity
• Ensure system availability

3. Data Encryption

• SSL/TLS encryption for website communication
• Encrypted storage for sensitive data
• Password hashing and secure authentication

4. Access Control

• Role-based access for staff and administrators
• Multi-level authentication
• Restricted database access

5. Network Security

• Firewall protection
• Intrusion detection systems
• Secure server infrastructure
• Regular vulnerability assessments

6. Data Backup & Recovery

• Daily automated backups
• Secure offsite backup storage
• Disaster recovery procedures

7. Employee Responsibility

• Confidentiality agreements
• Restricted data access
• Security training for staff

8. Customer Responsibility

• Protect login credentials
• Do not share OTP or passwords
• Report suspicious activities immediately

9. Incident Response

In case of security breach, we follow a structured incident response process including detection, containment, investigation, and resolution.

10. Data Retention & Disposal

• Data retained as per legal requirements
• Secure deletion of obsolete data
• Database access logging

11. Compliance

We comply with applicable laws including Information Technology Act 2000 and financial data protection guidelines.

12. Policy Updates

This policy may be updated periodically. Changes will be posted on this page.

13. Contact Information