Access Control Policy
Monada AI Ltd
1. Purpose
This policy defines the principles and procedures used by Monada to ensure that access to systems, infrastructure, and customer data is restricted to authorized users and managed in accordance with security best practices.The objective of this policy is to protect company assets and customer information from unauthorized access, disclosure, modification, or destruction
2. Scope
This policy applies to all Monada employees, contractors, and third parties who access:
- Monada internal systems
- Cloud infrastructure
- Production environments
- Customer data
- Company IT assets
Monada enforces the following access control principles:
Least Privilege
Users are granted only the minimum level of access required to perform their role.
Role-Based Access Control (RBAC)
Access permissions are assigned based on defined roles and responsibilities
Need-to-Know Basis
Access to sensitive systems or customer data is granted only when operationally required.
4. User Access Management
Access Provisioning
Access to systems, applications, and infrastructure must be approved by the relevant manager or system owner before access is granted.
Access Modification
Access rights are updated when user roles or responsibilities change.
Access Revocation
User access is revoked promptly when:
- employment or engagement ends
- a role no longer requires access
- security concerns arise
Administrative or privileged access is limited to designated personnel responsible for infrastructure and platform operations.
Privileged access is:
- granted only when operationally required
- restricted to authorized personnel
- periodically reviewed to ensure continued necessity
Access to Monada systems is protected through secure authentication mechanisms, including:
- strong password policies
- multi-factor authentication (MFA) where supported
- secure login mechanisms
7. Infrastructure Access Controls
Access to production systems and cloud infrastructure is restricted to authorized personnel.
Infrastructure access is managed through secure identity and access management systems provided by the cloud infrastructure provider.
8. Access Reviews
Access permissions are periodically reviewed to ensure they remain appropriate and aligned with job responsibilities.
Any unnecessary or excessive privileges are removed.
9. Policy Compliance
All employees and contractors are expected to comply with this policy.
Failure to follow access control procedures may result in disciplinary action or revocation of access privileges.
See it on your own workflowsStart a 30-day trial