Information Security Policy
Operational standards, access controls, network safeguards, and cryptographic protocols securing CoverMantra Services Private Limited.
Purpose & Scope
This Information Security Policy establishes the institutional framework for safeguarding digital assets, borrower telemetry, and computing resources. It mandates strict adherence to ISO 27001 controls, RBI IT Governance Guidelines, and CERT-In baseline cyber hygiene frameworks across all personnel and connected endpoints.
Core Security Triad (C-I-A)
Zero-trust access restriction ensuring borrower PII is visible only to authorized personnel and verified partner NBFCs.
Cryptographic hashing and tamper-evident audit trails ensuring borrower information cannot be altered in transit.
High-availability VPS infrastructure with redundant failover gateways ensuring 99.9% uptime for loan discovery.
Operational Security Controls
Role-based access (RBAC) with just-in-time elevation and mandatory 2FA.
Web Application Firewalls (WAF), DDoS mitigation, and intrusion prevention.
Centralized device management, disk encryption, and automatic security patches.
Third-party penetration testing to identify and remediate microservice CVEs.
Workforce Training & Anti-Phishing Drills
All CoverMantra employees undergo mandatory annual cyber hygiene certifications and unannounced monthly simulated phishing exercises. Background verification and non-disclosure agreements (NDAs) are required prior to system provisioning.
Information Security Desk
To report a suspected phishing campaign or request security architecture whitepapers:
CoverMantra Services Private Limited
CIN: U46109DL2024PTC438732
RBI IT Governance and Information Security directions compliant.
Consumers are never billed for security infrastructure or audits.