Document Control Information
Controlled corporate document maintained by Fobisoft Solutions Ltd.
Access Control Policy
This policy establishes the principles governing authentication, authorisation and access to Fobisoft information systems, ensuring that access is granted only to authorised individuals in accordance with business requirements and security best practices.
Executive Statement
Fobisoft Technologies Limited has delivered healthcare software solutions since 2018 and has operated as an incorporated Kenyan company since 2020. Protecting access to company and customer information is fundamental to maintaining confidentiality, integrity, accountability and trust across every product, platform and customer environment.
Access to information systems shall be granted strictly according to legitimate business requirements and authorised operational responsibilities. The organisation applies structured access management processes to ensure that users receive only the permissions necessary to perform their approved duties while protecting sensitive information from unauthorised access.
This Access Control Policy establishes the principles governing authentication, authorisation, account management and privileged access throughout the Fobisoft Governance Framework. Together with the Information Security Policy and related governance documents, it supports secure operations, regulatory compliance and responsible management of information assets.
Fobisoft Solutions Ltd. is committed to ensuring that access to information, systems and services is granted only to authorised individuals based upon verified business need, appropriate approval and the principle of least privilege.