Effective Date: 01/02/2025
Approved By: President, KPG99 Inc.

---

1. Purpose

The purpose of this policy is to define the acceptable use of KPG99 Inc.’s information technology (IT) systems, networks, devices, and data resources. The goal is to protect company and client information, maintain system integrity, and ensure secure and responsible use of all digital assets.

---

2. Scope

This policy applies to all employees, contractors, subcontractors, and third-party users who have access to KPG99 Inc.’s IT resources, including computers, networks, cloud platforms, and communication tools.

---

3. Policy Statement

All users of KPG99 Inc.’s IT systems must use company technology resources in a responsible, ethical, and lawful manner. Use of these resources must directly support business operations and client services. Unauthorized use, data sharing, or misuse of systems is strictly prohibited.

---

4. Acceptable Use Guidelines

• Access only those systems, data, and applications necessary for their role.
• Protect passwords and authentication credentials.
• Use company-approved devices and secure networks when accessing systems.
• Ensure all devices have updated security software and VPN access when required.
• Immediately report any suspicious activity or system anomalies.
• Use company email and collaboration tools for business purposes only.
• Refrain from downloading, copying, or transferring company or client data to personal devices or storage.

---

5. Prohibited Activities

• Unauthorized access to company or client systems or data.
• Using public or unsecured Wi-Fi to access confidential systems.
• Sharing login credentials or allowing others to use assigned accounts.
• Transmitting, storing, or downloading offensive, illegal, or non-business-related content.
• Installing unapproved software or applications on company systems.
• Tampering with or disabling security controls or monitoring tools.

---

6. Data Security

• Use strong passwords and change them regularly.
• Store confidential information only in approved systems or encrypted folders.
• Log out of systems when not in use.
• Avoid sending confidential or client information via unsecured channels.

---

7. Monitoring and Compliance

KPG99 Inc. reserves the right to monitor the use of its IT resources to ensure compliance with this policy and to protect against unauthorized access or misuse. Any detected violation will be investigated by the Compliance & Operations Team and may result in disciplinary action.

---

8. Enforcement

Violations of this policy may result in disciplinary measures, including loss of system access, termination of employment or contract, and legal action if warranted.

---

9. Review

This policy will be reviewed annually and updated as necessary to align with security best practices, client requirements, and emerging technologies.

---

Approved and Authorized by:
Puneet Gulati
President, KPG99 Inc.
Date: 01/02/2025