1. Purpose

This Cyber Security Policy is framed to ensure protection of client information, research data, and systems used by Prakash Gaba, acting as an Individual Research Analyst, from unauthorized access, cyber threats, or data breaches.

2. Applicability

This policy shall apply to Prakash Gaba, acting as an Individual Research Analyst, and to all devices, systems, and applications used for research analyst activities.

3. IT Infrastructure

Prakash Gaba operates as an Individual Research Analyst and uses limited IT infrastructure for carrying out research activities. The following systems are used:

• Laptop / Desktop
• Mobile Device
• Email Systems
• Internet Connectivity
• Spider Software (Spider.exe) for research activities

4. Access Control

Prakash Gaba shall ensure:

• Systems are password protected
• Strong passwords are used
• Access is restricted to authorized user only
• Devices are locked when not in use

5. Data Protection

Prakash Gaba shall ensure:

• Client data is stored securely
• Client information is kept confidential
• Sensitive data is not shared with unauthorized persons
• Data is not stored on public or unsecured devices

6. System Security

Prakash Gaba shall ensure:

• Antivirus software is installed and updated
• Operating systems are updated periodically
• Firewall protection is enabled
• Only licensed software including Spider.exe is used

7. Email and Communication Security

Prakash Gaba shall ensure:

• Official email is used for communication
• Suspicious emails are not opened
• Attachments from unknown sources are avoided
• Sensitive information is shared carefully

8. Data Backup

Prakash Gaba shall maintain periodic backup of:

• Client information
• Research data
• Communication records

Backup may be maintained on secure cloud or external storage.

9. Cyber Incident Management

In case of cyber incidents such as malware attack, unauthorized access, or data breach, Prakash Gaba shall:

• Take immediate corrective action
• Secure systems
• Document incident
• Implement preventive controls

10. Review

This policy shall be reviewed periodically.

Prakash Gaba
Date: 31^st March 2026