Network Security Policy

1. Purpose

To protect Backpack Works and client systems through network segmentation and traffic controls.

2. Scope

Cloud networks and environments we operate, and remote access to those environments.

3. Controls

• Production, staging, and development environments are logically separated.
• Cloud firewalls and security groups restrict traffic to only what is required.
• Cloudflare provides DNS and DDoS protection at the network edge.
• Administrative access requires authenticated, least-privilege credentials and is logged.
• Remote access to internal resources uses encrypted connections and MFA.

4. Review

This policy is reviewed at least annually.