DNZ Consulting LLC · Effective August 27, 2026 · Next review August 27, 2027
This policy states how DNZ Consulting LLC protects the computers and phones that touch company data.
1. Scope and ownership
This policy applies to every system, device, and person that DNZ Consulting LLC uses to do business. DNZ Consulting LLC is a small company. The Managing Member owns this policy. The Managing Member also acts as the Security Officer and the Data Protection Officer.
The Managing Member reviews this policy one time each year. The Managing Member also reviews it after any security incident.
2. Anti-malware
Every endpoint runs anti-malware protection at all times.
macOS endpoints run the built-in Apple protection: XProtect, XProtect Remediator, Gatekeeper, and Notarization checks. Apple updates the signatures automatically.
System Integrity Protection stays on.
Any Windows or Linux endpoint runs a maintained anti-malware product with automatic signature updates.
Nobody may disable anti-malware protection.
3. Software sources
Install software only from the vendor, an official app store, or a trusted package manager.
Do not install unsigned software unless the Managing Member approves it and records the reason.
Remove software that the business no longer needs.
4. Device hardening
Full-disk encryption stays on. macOS uses FileVault.
The operating system firewall stays on.
Automatic security updates stay on.
The device locks after 5 minutes of inactivity, and it needs a password to unlock.
Remote wipe stays enabled. macOS and iOS use Find My.
Backups run automatically and the backup is encrypted.
5. Mobile devices
A phone that reads company email uses a passcode and biometric unlock.
The operating system must still receive security updates from the vendor.
A jailbroken or rooted device may not hold company data.
6. Loss or theft
Report a lost or stolen device immediately. Follow the
Incident Response Policy. Lock the device
remotely, then wipe it, then rotate every credential it held.
7. Disposal
Erase a device with a cryptographic erase before disposal or resale.
8. Review
The Managing Member reviews this policy one time each year.