1. Overview
KIVO BPO is committed to protecting the confidentiality, integrity, and availability of our sensitive information, including customer information, employee information, and business information. This encryption protocol policy outlines the procedures and controls that are in place to ensure that sensitive information is encrypted using industry-standard encryption technologies.

2. Encryption Requirements
KIVO BPO requires that sensitive information is encrypted using industry-standard encryption technologies. Encryption must be applied to the following:

• Customer information: Payment information, including credit card numbers and bank account numbers, must be encrypted both in transit and at rest. Other customer information, such as contact information and transaction history, must be encrypted at rest.
• Employee information: Personal information, including social security numbers and medical information, must be encrypted both in transit and at rest. Payroll information and benefits information must be encrypted at rest.
• Business information: Trade secrets, intellectual property, financial information, and strategic plans must be encrypted both in transit and at rest.

3. Encryption Protocols
KIVO BPO requires the use of industry-standard encryption protocols, including:

• Transport Layer Security (TLS): TLS must be used to encrypt data in transit, such as when data is transmitted over the internet or over a local network.
• Advanced Encryption Standard (AES): AES must be used to encrypt data at rest, such as when data is stored on servers or on removable media.

4. Encryption Key Management
KIVO BPO requires the following procedures and controls for encryption key management:

• Key generation: Encryption keys must be generated using industry-standard key generation algorithms.
• Key distribution: Encryption keys must be distributed securely, such as through encrypted email or secure file transfer protocols.
• Key storage: Encryption keys must be stored securely, such as on encrypted servers or on removable media that is stored in a locked cabinet.
• Key rotation: Encryption keys must be rotated periodically, in accordance with industry best practices.

5. Compliance and Testing
KIVO BPO regularly reviews and tests its encryption protocols to ensure compliance with industry standards and best practices. This includes regular vulnerability assessments and penetration testing to identify weaknesses in our encryption controls.

6.Review and Maintenance
KIVO BPO regularly reviews and updates this encryption protocol policy to ensure that it remains effective and aligned with our information security objectives and controls.

If you have any questions or concerns about this encryption protocol policy or our handling of sensitive information, please contact us at [email protected].