Policies
Artificial Intelligence Acceptable Use Policy
1.0 Purpose Publicly available applications driven by Artificial Intelligence (“AI”), such as chatbots (ChatGPT, Google’s Gemini, Microsoft Copilot) or image and video generators are impressive and widely popular, but while these content-generating ...
IT Service Management Policy
1. Purpose This policy aims to establish a framework for effective IT Service Management (ITSM) to ensure the delivery of reliable, high-quality IT services that meet the needs of the organization. 2. Scope This policy applies to all IT services, IT ...
Physical Access Policy
1.0 Purpose The purpose of this Physical Access Policy is to establish the rules of granting, controlling, monitoring, and removing physical access to Encore’s facilities, property and equipment. 2.0 Scope The Physical Access Policy applies to all ...
Data Classification Policy
1.0 Purpose The purpose of the Data Classification Policy (the “Policy”) is to ascertain information and data of Voyages Encore Travel Inc.’s (“Encore”) systems are maintained in a secure, accurate, and reliable manner and be readily available for ...
Password Policy
1.0 Purpose The purpose of the Password Policy (the “Policy”) is to establish a standard for the creation of strong passwords, the protection of those passwords, and the frequency of change. 2.0 Scope The scope of this policy includes all personnel ...
Security Awareness Training Policy
1.0 Overview Security awareness training is the process of educating employees on the risks and best practices of cybersecurity. It aims to equip them with the knowledge and skills to protect themselves and the organization from cyber threats. ...
Workstation and Mobile Device
1.0 Purpose The purpose of this policy is to ensure the security of information residing on workstations and mobile devices, as well as information that users can access through them. This policy defines procedures and restrictions for all end-users ...
Ransomware Policy
1.0 Purpose The purpose of the Ransomware Policy (the "Policy") is to establish the goals and vision for the ransomware response process in compliance with SOC 2 and the Personal Information Protection and Electronic Documents Act ("PIPEDA"). This ...
Information Security Policy
1.0 Introduction Voyages Encore Travel Inc. (“Encore”) is committed to safeguarding the confidentiality, integrity and availability of all physical and electronic information assets of the organization to ensure that regulatory, operational and ...
Network Security
1.0 Purpose One of Voyages Encore Travel Inc.’s objectives is to secure all networks under its control from intrusions and to provide and maintain the security of Voyages Encore Travel Inc.’s infrastructure and data. This policy provides guidelines ...
Email Policy
1.0 Overview Electronic email is extensively used across various industry verticals and serves as the primary method of communication and awareness within an organization. However, improper use of email can introduce legal, privacy, and security ...
Change Management Policy
1.0 Purpose Effective change management within Voyages Encore Travel Inc.'s ("Encore") assets, environments and resources is important to ensuring that we consistently deliver quality software and services while we also strive to meet various ...
Access Management Policy
1.0 Purpose The purpose of the Access Control and User Access Management Policy (the "Policy") is to establish and maintain access rights management procedures to prevent unauthorized access to data under Voyages Encore Travel Inc.’s (“Encore”) ...
Acceptable Use Policy
1.0 Purpose The purpose of the Acceptable Use Policy (the "Policy") is to outline the acceptable use of Voyages Encore Travel Inc.’s computing and network resources ("IT resources") as well as other organizational assets. These rules are in place to ...