Cathy Beluch Consulting takes the confidentiality, integrity, and availability of client information seriously. This policy outlines the practices we follow to protect data and systems.
Data Protection
- Client data is stored on reputable, encrypted cloud platforms.
- Data in transit is protected with TLS encryption.
- Access to client information is limited to authorized personnel only.
Access Controls
We enforce strong password requirements, multi-factor authentication on critical accounts, and the principle of least privilege when granting access to systems.
Device and Endpoint Security
Devices used to access client information are protected with updated operating systems, endpoint security software, and full-disk encryption where supported.
Vendor Management
We use reputable third-party providers for scheduling, communication, and storage, and review their security and privacy commitments before use.
Incident Response
In the event of a confirmed security incident affecting client data, we will investigate promptly, take corrective action, and notify affected parties as required by applicable law.
Reporting Concerns
To report a security concern, contact cathy@cathybeluchconsulting.com.