Company Policies

When forming NextGen CGI, it was determined from the beginning that having everyone on the same page mitigates risk. As an IT provider, especially in an age where nation states are actively attacking our systems on a continual basis, it was quickly realized that a central focus on cybersecurity would be mandatory, and the policies needed to secure our environment, or to help during the unlikely event of a business disaster, an absolute must. This is why NextGen CGI invested so heavily in the organization of our business.

NextGen CGI is a proud member of the CyberXchange market place. Using CyberXchange, we have access to the latest and best technologies in cyber incident mitigation. To insure NextGen CGI is on the cutting edge of cybersecurity, we also subscribe to and attend all major IT security incident response events, and we take special care to share and learn from other experts dedicated to keeping our networks and systems safe and secure. With over 40 policies in place, when you choose NextGen CGI, as your full stack provider, rest assured focused organization and security is a priority taken seriously.

Below is a list of the policies in place at NextGen CGI. Because many of our policies contain sensitive information related to internal security operations, we keep our most sensitive policies in written form only:

• Acceptable Use
• Access Control
• Anti Virus and Malware
• Asset Management
• Audit and Accountability
• BYOD
• Business Continuity Plan
• Change Management
• Configuration Management
• Data Archive Retention and Destruction
• Data Classification Handling
  
• Disaster Recovery Plan
• Encryption Cryptography
• Endpoint Security
• Ethics Code of Conduct
• Identification and Authentication
• Incident Response
• Log Monitoring
• Maintenance
• Media Protection
• Network Security
• Penetration Testing Methodology
• Personnel Security
• Physical Environmental Protection
• Physical Protection
• Privacy
• Risk Assessment
• Risk Management
• Security Assessment
• Security Awareness
• Security Awareness and Training
• Software Development
• System and Communications Protection
• System and Information Integrity
• Vendor Management

Policies maintained in written form are confidential security operations not available for public inspection.

Send inquiries to support@nextgencgi.com

---

Vaccination Policy

Effective date: August 1, 2020

Purpose

In accordance with NextGen CGI's duty to provide and maintain a workplace that is free of known hazards, we are adopting this policy to safeguard the health of our employees and their families; our customers and visitors; and the community at large from infectious diseases, such as COVID-19 or influenza, that may be reduced by vaccinations. This policy will comply with all applicable laws and is based on guidance from the Centers for Disease Control and Prevention and local health authorities, as applicable.

Scope

All onsite employees are required to receive vaccinations as determined by our Executive Management Team (EMT), unless a reasonable accommodation is approved. Onsite employees not in compliance with this policy will work remotely until their employment status is determined by our EMT.

Procedures

Employees will be notified by the EMT as to the type of vaccination(s) covered by this policy and the timeframe(s) for having the vaccine(s) administered. NextGen CGI will provide a list of locations to assist onsite employees in receiving the vaccine on their own.

NextGen CGI will pay for all vaccinations; COVID-19 vaccinations are free, whether an individual has health insurance or not. When not received in-house, vaccinations should be run through your health insurance and be submitted for reimbursement where applicable. 

All employees will be paid for time taken to receive vaccinations. For offsite vaccinations, employees are to work with their team coordinator to schedule appropriate time to comply with this policy.

Before the stated deadlines to be vaccinated have expired, employees will be required to provide either proof of vaccination or an approved reasonable accommodation to be exempted from the requirements. Employees exempte from the requirement will be required to work remotely at any locaton they choose.

Reasonable Accommodation

Employees in need of an exemption from this policy due to a medical reason, or because of a sincerely held religious belief, must submit a completed Request for Accommodation form to the EMT to begin the interactive accommodation process as soon as possible after vaccination deadlines have been announced. Accommodations will be granted where they do not cause NextGen CGI undue hardship or pose a direct threat to the health and safety of others.  Employees who are not vaccinated by reason of accommodation must work remotely at any location they choose.

Please direct any questions regarding this policy to the EMT.