Steps to follow :- 1. Active contract between the parties 2. NDA to be signed for not sharing any confidential information with anyone 3. NDA to be signed for Infosec to avoid any data leakage 4. Complete process to be designed and approval to be taken to follow ahead 5. Share the process with the team to follow in day to day operations..

Usage of Cell Phone Camera on production environment : Mobile badge holders while allowed to carry Cell Phone in their respective production areas are not supposed to use the cell phone camera • Clicking the monitor screen and sharing the screenshot is not at all encouraged and this practice to be stopped completely with immediate effect. • USB cables, Data cable etc, are prohibited inside production areas. • Backpacks, handbags, or purses are not permitted in Production Areas • Production floor access (Physical Access provisioning) to be provisioned only post seeking approval from the respective stakeholders • Credential Sharing (Password sharing) is not permitted • Security Awareness Communications:

1. NDA is the first step for data safety and protection 2. Security access to be managed by onshore post manager's approval. 3. No recording session for the training/shadowing to safeguard client's information. 4. Use virtual desktop to access client's application with frequent password change. 5. SOP to be saved inside virtual desktop. 6. Pre-mandatory training to be completed by team before migration started. 7. Any transfer of files to be encrypted by secured links. 8. Follow Checklist to adhere to procedures. 8. Quality, Risk and Compliance teams to be remain engaged.

Safeguarding data with offshore BPO teams requires layered security. Key practices include Role-Based Access Control and Multi-Factor Authentication to limit and secure access. Data Minimization ensures only necessary information is shared. Utilize VPNs, Encryption, and Data Loss Prevention (DLP) tools to secure data transit and prevent leaks. Clear confidentiality agreements and regular security training reinforce best practices, while access logs and frequent audits maintain oversight. Finally, establish an Incident Response Plan for quick action on breaches. Together, these steps protect client data and foster secure, productive collaboration

To maintain data security , in BPO have seen below practices 1. No paper pen policy on floor . 2. ⁠No mobile phone or no mobile phone with camera / recorder or no smart phones on floor 3. ⁠All the bags/purses in locker 4. ⁠Max u can carry on a floor is a bottle of water and your headset 5. ⁠Stringent compliance and policy in place for data confidentiality and regular training of staffs on same 6. No laptops /computers to be left un locked 7. Regular surprise internal audits on floor to ensure the practices are in place (most of points mentioned above ) 8. If needed hiring an external / 3rd party auditor to ensure same 9. Data encryption 10. No sharing of data without correct approvals even between cross teams 11. NDAs to be signed

1. Strict access controls - Limit data access to only essential personnel. 2. Data encryption - Protect data in transit and at rest with encryption protocols. 3. Security training - Educate offshore teams on data protection practices and potential risks. 4. NDAs - Require signed NDAs from all team members handling sensitive data. 5. Regular audits - Periodically review data security policies and practices for compliance. 6. Utilize VPNs and secure networks - Ensure all remote connections use secure, encrypted channels. 7. Monitor data activity - Track and log data access and usage to detect any suspicious behavior. 8. Restrict data transfer - Limit or disable data export options to prevent unauthorized sharing.

- No pen paper policy. - Smartphones should not be allowed inside the floor. - 2FA. - Use of YubiKey to avoid password sharing.

To safeguard data confidentiality with offshore BPO teams, I focus on building trust and setting clear protocols. By sharing our commitment to secure handling, regular training, and compliance with standards like ISO and Data Privacy Act in the Philippines, we cultivate a security-aware culture. We implement strict access controls, encrypted communication, and regular audits, ensuring everyone understands the impact of data security. Together, we protect client data with shared responsibility, enhancing collaboration and peace of mind for all.

1. Virtual Private Network (VPN) Segregation: Use VPNs to create isolated network segments for different teams, ensuring that data access is limited to specific groups based on their roles. 2. Data Watermarking: Embed invisible watermarks in sensitive documents to track unauthorized distribution and leaks. This can help trace back the source of any data breach. 3. Geofencing: Restrict access to sensitive data based on geographical locations, ensuring that data can only be accessed within certain physical or network boundaries. 4. Data Tokenization: Replace sensitive data with tokens that hold no exploitable value, but can be mapped back to the original data within secure environments only. Above should mitigate data confidentiality concerns