Company Policies
Company Policies
Information Security Policy
Rauch International
Last updated: 2026
1. Purpose
Rauch International is committed to protecting sensitive information against unauthorized access, disclosure, alteration, and destruction.
This policy establishes minimum information-security standards across the organization.
2. Scope
This policy applies to:
- Employees
- Directors
- Officers
- Affiliates
- Operating entities
- Contractors
- Partners
- Vendors
- Any person handling company data
3. Information Covered
This policy applies to:
- Personal data
- Client information
- Partner and vendor data
- Financial information
- Proprietary methods
- strategic plans
- Signal-level inputs, structured outputs, decision-grade evaluation materials, and pre-engagement analysis data
- Digital communications
- System access credentials
4. Access Control
Access to information is:
- Role-based
- Limited to necessity
- Reviewed periodically
Credentials must never be shared.
5. Data Handling
Information must be:
- Used only for authorized purposes
- Stored securely
- Transmitted using appropriate safeguards
- Disposed of securely
6. System Security
Rauch International maintains:
- Reasonable administrative safeguards
- Technical controls
- Physical protections
- Restricted access environments
7. Incident Response
All suspected or confirmed security incidents must be reported immediately through the designated contact channel:
Incidents include:
- Data breaches
- Unauthorized access
- Malware
- Lost devices
- Suspected compromise
8. Third-Party Controls
Third parties handling data must:
- Meet applicable security requirements
- Protect confidentiality
- Notify of incidents
- Use data only as authorized
9. Training
Personnel may receive training relating to:
- Data protection
- Secure handling
- Risk awareness
10. Enforcement
Violations may result in:
- Disciplinary action
- Contract termination
- Legal action
11. Continuous Improvement
Security controls may be reviewed periodically.
This policy evolves with risk.
12. Policy Review
This policy may be amended.
Current version governs.