Home / Data Security & Encryption Standards
Data Security & Encryption Standards
This page explains the security measures and data-protection practices WII may use to safeguard information handled through the website.
Home / Data Security & Encryption Standards
Data Security & Encryption Standards
This page explains the security measures and data-protection practices WII may use to safeguard information handled through the website.
1. Overview
World Investment Institute (WII) recognises the importance of protecting information processed through its website and related digital services. This page provides a general overview of the organisational and technical controls that may be used to support confidentiality, integrity and availability.
2. Information Security Measures
Security measures may include:
- secure hosting and network protections;
- regular software updates, maintenance and vulnerability management;
- administrative controls governing access to website systems;
- backup and recovery procedures appropriate to the systems in use;
- monitoring and review of security-related events where appropriate.
3. Encryption Standards
Where encryption is appropriate, WII may use widely accepted technologies to protect information in transit and, where relevant, at rest. The exact technologies depend on the website infrastructure, hosting environment and third-party services in use.
Final wording should be aligned with the actual hosting provider, certificate configuration, storage practices and any systems used for forms, analytics or communications.
4. Access Control
Access to administrative systems and personal information should be limited to authorised individuals who require access for legitimate operational purposes. Access controls may include unique user accounts, strong passwords, role-based permissions and additional authentication measures where available.
5. Third-Party Services
WII may rely on trusted third-party providers for services such as hosting, email, analytics, forms, content delivery and website maintenance. Appropriate security and privacy considerations should be reviewed when selecting and configuring such providers.
6. Data Retention
Information should be retained only for as long as reasonably necessary for the purposes for which it was collected, to meet operational needs, or to satisfy applicable legal, regulatory or security requirements. Retention periods should be confirmed once the final website functionality is established.
7. Incident Response
WII may maintain procedures for identifying, assessing and responding to suspected security incidents. Where an incident affects personal information, appropriate investigation, containment, remediation and notification steps should be considered in accordance with applicable requirements.
8. International Transfers
Because WII operates an international network and may use service providers in different jurisdictions, information may be processed or accessed across borders. Where this occurs, reasonable safeguards should be considered in accordance with applicable data-protection requirements.
9. Policy Updates
This page may be updated from time to time to reflect changes in technology, vendors, website functionality, security practices or applicable requirements. The latest version should be published on this page with an updated effective date where appropriate.
10. Contact
For questions about data security or the handling of information through the website, please contact:
World Investment Institute (WII)
Central Financial District, Hong Kong SAR
info@wiinstitute.org
Questions About Data Security?
Contact WII if you have questions about this security page or the safeguards used for information submitted through the website.