Date of entry into force: 14.04.2024.<\/strong><\/p>\n Elite2You Academy is committed to keeping user data secure, protecting the digital learning experience and minimising cybersecurity risks.<\/p>\n This policy describes the technical and organisational measures we use to keep the platform secure.<\/p>\n This security policy gives users a reassuring answer to the question of how we protect their data. It reduces the legal risks arising from GDPR and provides a basis for customer support should a technical or data security issue arise. <\/p>\n All personal data provided on the site is transmitted over an encrypted SSL connection.<\/p>\n<\/li>\n The data stored in the database is protected according to authorisation levels, preventing unauthorised access.<\/p>\n<\/li>\n Passwords are not stored as plain text, but are saved using modern one-way encryption algorithms (e.g. bcrypt).<\/p>\n<\/li>\n<\/ul>\n Passwords are not recognised by the system and are not stored in a decryptable form.<\/p>\n<\/li>\n Users are instructed to use strong passwords.<\/p>\n<\/li>\n We recommend that users update their passwords regularly for security reasons.<\/p>\n<\/li>\n The system is protected against brute-force attacks (e.g. IP restriction, temporary blocking after multiple failed logins).<\/p>\n<\/li>\n<\/ul>\n The platform and hosting are hosted with a trusted service provider, where daily backups are made.<\/p>\n<\/li>\n We perform regular WordPress and plugin updates to avoid vulnerabilities.<\/p>\n<\/li>\n We also use firewalls, spam protection and virus scanning.<\/p>\n<\/li>\n The administration area is only accessible by internal staff, protected by IP filtering and two-factor authentication.<\/p>\n<\/li>\n<\/ul>\n The system uses a role-based access model:<\/p>\n Learners<\/strong> only have access to their own courses.<\/p>\n<\/li>\n Teachers<\/strong> can only edit their own courses.<\/p>\n<\/li>\n Admins<\/strong> have full access, but only in relation to their job role.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n All activity is logged so that it can be retrieved if any anomalies occur.<\/p>\n<\/li>\n<\/ul>\n We make daily backups of the website, database and course data.<\/p>\n<\/li>\n Backups are stored in encrypted form on a separate server and are only accessible by administrators.<\/p>\n<\/li>\n The data will be kept for the period specified in the GDPR and will be deleted at the user’s request.<\/p>\n<\/li>\n<\/ul>\n If suspicious activity is detected, an immediate blocking and investigation is carried out.<\/p>\n<\/li>\n In case of a data leak or vulnerability, we will immediately notify the users concerned as well as the authorities, as required by the GDPR.<\/p>\n<\/li>\n We have an emergency procedure that includes protocols for incident handling, data recovery, recovery and notification steps.<\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":" Cyber security principles Date of entry into force: 14.04.2024. Elite2You Academy is committed to keeping user data secure, protecting the digital learning experience and minimising cybersecurity risks. This policy describes the technical and organisational measures we use to keep the platform secure. This security policy gives users a reassuring answer to the question of how … Continue reading Security policy<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-21646","page","type-page","status-publish","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t
\n1. Data security and encryption<\/h3>\n
\n
\n2. Password management and access protection<\/h3>\n
\n
\n3. Website and server security<\/h3>\n
\n
\n4. Access and privileges<\/h3>\n
\n
\n
\n5. Backups and data storage<\/h3>\n
\n
\n6. Cyber security incident protocol<\/h3>\n
\n