“Founded in Kosovo. Serving Humanity Globally.”
Policy E2 · Data, Information & Communications
IT Acceptable Use & Information Security

IT Acceptable Use & Information Security.

To protect the Foundation’s information, systems and data from loss, misuse and cyber threats.

Purpose

To protect the Foundation’s information, systems and data from loss, misuse and cyber threats.

Key commitments

  • Access is role-based and least-privilege, with strong passwords and multi-factor authentication on key systems.
  • Devices are encrypted, updated and protected; confidential data is not stored on unapproved services.
  • Backups are regular and tested; media and data are securely disposed of.
  • Systems are for Foundation purposes only; phishing and suspicious activity are reported.
  • Security incidents are managed promptly, triggering breach response where personal data is affected.

This is a public summary of policy E2 — IT Acceptable Use & Information Security, part of the Foundation’s board-adopted Policies & Compliance Framework. The full policy document is being finalised for legal verification and Board adoption, and is available on request. Statutory references are verified against the consolidated texts in the Official Gazette of the Republic of Kosovo at the date of adoption.