Visier Corporate Policies

Anti-Bullying, Harassment, and Discrimination Policy

This policy describes Visier’s commitments and expectations related to maintaining a workplace where we can all thrive - free from bullying, harassment, and discrimination.

Anti-Corruption Policy

This policy defines Visier’s commitments to conducting business with fairness and integrity; including not tolerating bribery, unethical and corrupt practices.

Background Check Policy

| For employees and contractors | This policy describes the types of background checks Visier uses to meet the information security and ethics expectations of our customers, and to ensure a safe workplace for our teammates.

Code of Conduct and Ethics

This policy defines broad principles of legal and ethical business conduct in which Visier will undertake. This includes principles that guide employees in conducting themselves in an ethical, fair, and respectful manner.

Social Media Policy

This policy defines what is considered acceptable and unacceptable when posting on social media.

Acceptable Use Policy

This policy defines the requirements that must be adhered to when using and accessing Visier’s computing resources, systems, and information assets.

Access Control Policy

This policy defines what is considered acceptable and unacceptable when using and accessing Visier’s information resources.

Asset Management Policy

This policy defines the responsibilities and requirements for identifying, managing, and protecting Visier’s information assets throughout the entirety of its lifecycle.

Authentication Policy

This policy defines requirements for the adequate management of passwords and other forms of authentication used for accessing resources that contain Visier and customer information.

Business Continuity Policy

This policy requires managers and directors of relevant teams to define business continuity plans and processes to ensure Visier is capable of operating critical functions to meet organizational goals and business commitments during a major disruption or disaster.

Cloud Services Policy

This policy defines the requirements for managing cloud services throughout their lifecycle to ensure the security, confidentiality, and privacy of information belonging to Visier and its customers.

Encryption Policy

This policy defines the requirements for implementing encryption mechanisms to ensure the confidentiality and integrity of sensitive and/or confidential Visier information.

Email and Communication Policy

This policy defines what is considered acceptable and unacceptable when using, accessing and sending emails and communicating on behalf of Visier.

Information Classification Policy

This policy defines the requirements for classifying and managing Visier and customer information to ensure that information is appropriately protected, labeled, and managed according to business and legal requirements, its sensitivity, value, and criticality.

Information Security Incident Management Policy

This policy defines the information security incident handling process, defines incident categories, specifies key contacts and escalation protocols when incidents occur.

Information Security Policy

This policy defines the operational information security policies, standards, and procedures for protecting the security (confidentiality, integrity, availability) and resiliency of Visier’s information assets, facilities, systems, and customer data.

Network Security Policy

This policy defines the requirements for secure networks and the associated infrastructure that connect to Visier’s production networks, infrastructure, and communications systems, including those managed by third-parties.

Physical Security Policy

This policy defines the requirements for establishing physical access controls at Visier’s offices, and for ensuring physical and environmental security protection are in place at data centers where Visier operates.

Vulnerability Management Policy

This policy defines the requirements for identifying and managing threats and vulnerabilities that affect the operation and security of Visier’s information systems and to ensure that such systems and the information contained within remain protected.

Customer Data Retention Policy

This policy establishes requirements for the retention of customer data for business and legal purposes. It encompasses the use, storage, transmission, processing, and destruction of customer data.

Privacy Policy

This policy ensures that Visier takes the appropriate steps to comply with applicable privacy laws. It further guides Visier in meeting customers’ expectations of how their data should be managed.

Change Management Policy

This policy defines the requirements within Visier’s change management process which minimize negative and/or unexpected impacts to Visier’s operation and its services and customers.

Customer Data Handling Policy

This policy defines the requirements for safeguarding Customer Data and other information about Visier customers (Customer Information) throughout their lifecycle. These measures are intended to maintain the security, privacy, confidentiality, and integrity of such data.

Enterprise Risk Management Policy

This policy defines requirements to adequately manage opportunities and risks to protect Visier and its customers.

Sanctions Policy

This policy defines compliance with Sanctions, Embargoes, and Restricted Party lists, as well as reinforces Visier’s commitment to compliance.

Trade Compliance Policy

This policy defines requirements for complying with all statutory and regulatory requirements associated with the export, import, transfer, or reexport of items, software, and technology globally.

Vendor Risk Management Policy

This policy ensures Visier engages vendors that are able to meet its requirements (including security and compliance requirements), and to ensure Visier is able to adequately manage risks that arise from working with vendors.