Risk Mitigation Policy

TL;DR

This policy outlines risk mitigation steps for Licensees and Sub-Licensees, ensuring proper account provisioning, mandate adherence, and data security.

New customers should be placed in appropriate subscription tiers, with scaling options clearly communicated. Accounts must be monitored to prevent exceeding capacity limits.

Sub-Licensees must agree to the Licensee Mandate Agreement, ensuring compliance with ED’s terms.

For data security, personal customer details should never be shared with ED, including screenshots or forwarded emails.

OVERVIEW & PURPOSE

This policy outlines the recommended risk mitigation steps to be taken by Licensees and/or Sub-Licensees. For details, please refer to the Licensee Mandate.

SCOPE

All employees, contractors, consultants, sub-licensees, appointed providers, temporary and other workers within or outside of the Licensee’s organisation and its subsidiaries must adhere to this policy.

POLICY DETAILS

Appropriate Provision & Scaling

Initial tier allocation. New customers should be placed on a subscription tier that adequately accommodates their size, operational needs, user/audience pool.

Scaling. Customers should be made aware of the scaling options available to them, as well as the need to upgrade to the next tier should the need arise and/or capacity be reached.

Continuous monitoring. Accounts should be regularly monitored and customers should be notified when they are reaching their tier capacity, e.g. user limit, storage limit, etc. Hardware bottlenecks for accounts that exceed tenancy limits will not be rectified by ED where no appropriate measures to scale growing accounts has been taken.

Mandate Adherence

Sub-Licensee Mandate. Sub-licensees, i.e. Enterprise customers who can create multiple accounts, must be made aware of and agree to the terms defined in the Licensee Mandate Agreement. The Licensee is responsible for contracting with the Sub-Licensee in adherence to and alignment with the mandated terms provided by ED.

Data Security

No sharing. When communicating with ED in any capacity, no personal details should be shared, e.g. in the form of screenshots of customer conversations or forwarded customer emails.