Internal Cyber Investigation

Cybernav Privacy and Data Security Policy

CybernaV

Privacy and Data

Security Policy

Cybernav Privacy and Data Security Policy

Introduction

Data security is crucial for Cybernav. Customer and client information,

product designs, sensitive materials of any sort, future projections, governmental

and private contracts, and secure data systems are impossible to replace if lost,

compromised or damaged and dangerous to national security and the company’s

future in the hands of criminals and hostile governments and organizations. Data

lost due to disasters such as a flood or fire is devastating, but losing sensitive

information to hackers (foreign or domestic) or malware infections can have far

greater consequences. How we handle and protect Cybernav data is central to the

security of our business and the privacy expectations of customers, employees,

and partners (both private and governmental).

Classification of Cybernav Materials

HIGHLY CONFIDENTIAL: This classification applies to the most sensitive

business and governmental information that is intended strictly for use within

Cybernav. Its unauthorized disclosure could seriously and adversely impact our

company, business partners, governmental affiliates, vendors and/or customers in

the short and long term. This designation concerns all data and access to TOP

SECRET, SECRET and CONFIDENTIAL information of any sort, and similar

data. All VPN ONLY accessible materials are considered TOP SECRET. TOP

SECRET materials may not leave the premises of Cybernav or be accessed

remotely, off property.

SENSITIVE: This classification applies to sensitive information that is intended

for use within Cybernav, and any information that you as an individual or as an

Cybernav Privacy and Data Security Policy

employee would consider to be private should be included in this classification.

Examples include employee performance evaluations, internal audit reports,

various financial reports, collaborative in-production designs, partnership

agreements, marketing plans and contact lists.

INTERNAL USE ONLY: This classification applies to sensitive information

that is generally accessible by all Cybernav employees and is intended for use

exclusively only within our company. Unauthorized disclosure to outsiders is

against policy and may be harmful to Cybernav.

DUTY TO REPORT

Any breach of these policies by an employee, or reasonably known to have

occurred by a fellow employee, must be reported immediately to the employee’s

immediate superior. The failure to self-report or report the actions of others

concerning HIGHLY CONFIDENTIAL, SENSITIVE or INTERNAL USE

ONLY may lead to criminal or civil liability. If disclosure violating the above

policies is reasonably believed to have occurred by a superior of an employee,

then the report must go to the Director of Human Resources for Cybernav.

PENALTIES

Due to the sensitive nature of the work conducted at Cybernav, both civil and

criminal penalties may apply to the unauthorized release or any disclosure of

information considered HIGHLY CONFIDENTIAL, SENSITIVE, or

INTERNAL USE ONLY.