Acceptable Use of IT Assets Policy

Version: 3.0
Last Updated: December 2025

1. Purpose

This policy defines the acceptable use of Monada’s information technology assets, including company devices, systems, and networks.
Its purpose is to ensure that company systems and customer data are used responsibly and protected from unauthorized access, misuse, or security risks.

2. Scope

This policy applies to all Monada employees, contractors, and authorized personnel who access or use company IT assets, including:

• Company laptops and workstations
• Corporate accounts and credentials
• Internal systems and cloud services
• Company networks and infrastructure
• Customer data processed through company systems

3. Acceptable Use

Users are expected to use company IT assets responsibly and in a manner that supports Monada’s business operations.

Acceptable use includes:

• Using company devices primarily for business purposes
• Protecting login credentials and authentication methods
• Following company security practices, including password and multi-factor authentication requirements
• Locking devices when unattended
• Accessing company systems only through approved methods and tools

4. Prohibited Activities

Users must not engage in activities that could compromise company systems, data, or security.

Prohibited activities include:

• Sharing passwords or authentication credentials
• Installing unauthorized software or applications on company devices
• Accessing company systems without authorization
• Attempting to bypass security controls or monitoring systems
• Using company systems to perform illegal, harmful, or unethical activities
• Storing sensitive company or customer data on unauthorized systems or personal devices without approval

5. Data Protection Responsibilities

Employees and authorized users must handle company and customer data in accordance with Monada’s security and privacy practices.

This includes:

• Accessing data only when required for job responsibilities
• Avoiding unauthorized disclosure of company or customer information
• Using approved storage and communication channels for business data
• Immediately reporting any suspected data exposure or security issue

6. Device Security

Company devices must be maintained in a secure manner.

Security practices include:

• Keeping operating systems and security updates enabled
• Using device lock screens and authentication mechanisms
• Avoiding connection to untrusted networks when accessing company systems
• Reporting lost or stolen devices immediately

7. Incident Reporting

Any suspected security issue, unauthorized access, device loss, or potential data exposure must be reported promptly to the engineering or management team responsible for platform security.

Early reporting helps ensure rapid investigation and mitigation of potential risks.

8. Monitoring and Compliance

Monada may implement reasonable monitoring and security controls to protect company systems, infrastructure, and customer data.

Failure to comply with this policy may result in access restrictions or other corrective actions in accordance with company procedures.

9. Policy Updates

This policy may be updated periodically to reflect evolving security practices and operational requirements. The most recent version will be maintained in Monada’s internal security documentation.

‍