Confidentiality or non-disclosure Agreements

Policy

Document ID ACPL-ISMS-C6.6
Document Classification Internal
Issue Date (effective from) 01.12.2023
Version No 1.0
Latest Review Date 01.12.2023

Nitin Gupta Kunal Parikh Vijay Gupta

CISO Director Director

Prepared By Reviewed By Approved By

Confidentiality or non-disclosure agreements Policy

1. Control statement:

Confidentiality or non-disclosure agreements reflecting the organization’s needs for the protection of
information should be identified, documented, regularly reviewed and signed by personnel and other
relevant interested parties.

2. Purpose:

To maintain confidentiality of information accessible by personnel or external parties.

3. Scope:

This policy covers the information security confidentiality for all who access the
information. It may include the employees and other interested parties.

4. Procedure:

Confidentiality or non-disclosure agreements address the requirement to protect confidential

information using legally enforceable terms.

Confidentiality or non-disclosure agreements (NDA) are applicable to interested parties and personnel
of the organization.

The NDA is developed on the basis of the information security confidentiality level and access by the
interested party.

The following elements (as applicable) are considered in the NDA:

 A definition of the information to be protected (e.g. confidential information);

 The expected duration of an agreement, including cases where it can be necessary to maintain
confidentiality indefinitely or until the information becomes publicly available; The required
actions when an agreement is terminated;
 The responsibilities and actions of signatories to avoid unauthorized information disclosure;
 The ownership of information, trade secrets and intellectual property, and how this relates to
the protection of confidential information;
 The permitted use of confidential information and rights of the signatory to use the
information;

Doc ID: ACPL-ISMS-C6.6 Version 1.0 Last Rev. Date: 01.12.2023 Page 2 of 3

This document is confidential and must not be shared or copied without written permission from
Aethereus Consulting. Please return or destroy upon request.
Confidentiality or non-disclosure agreements Policy

 The right to audit and monitor activities that involve confidential information for highly
sensitive circumstances;
 The process for notification and reporting of unauthorized disclosure or confidential
information leakage;
 The terms for information to be returned or destroyed at agreement termination;
 The expected actions to be taken in the case of non-compliance with the agreement.

Requirements for confidentiality and non-disclosure agreements are reviewed periodically and when
changes occur that influence these requirements.

5. References:

1. Non-Disclosure Agreement

6. Revision History

Revision Date Description Author

1.0 01.12.2023 Initial release CISO

Doc ID: ACPL-ISMS-C6.6 Version 1.0 Last Rev. Date: 01.12.2023 Page 3 of 3

This document is confidential and must not be shared or copied without written permission from
Aethereus Consulting. Please return or destroy upon request.