Connecting0%
Initializing fiber connection...
Initializing fiber connection...
These Security Guidelines describe the measures adopted by OneConnect Infrastructure Limited ("OneConnect") to safeguard its network infrastructure, systems, applications, and customer data.
They also provide customers, partners, and users with practical guidance on how to securely access and use OneConnect's internet and network services.
These Guidelines complement OneConnect's Privacy Policy, Terms of Use, Cookies Policy, and Regulatory and service agreements.
These Security Guidelines describe the measures adopted by OneConnect Infrastructure Limited (“OneConnect”) to safeguard its network infrastructure, systems, applications, and customer data.
They also provide customers, partners, and users with practical guidance on how to securely access and use OneConnect’s internet and network services.
Privacy Policy
Terms of Use
Cookies Policy
Regulatory and service agreements
All OneConnect customers and subscribers
Corporate and enterprise clients
Authorized users, administrators, and partners
All OneConnect digital platforms, portals, networks, and infrastructure
OneConnect maintains a structured information security governance framework that:
Aligns with ISO/IEC 27001:2022 information security management principles
Complies with NCC regulatory requirements
Supports compliance with NDPR and applicable international data protection standards
Enforces internal policies for risk management, access control, and incident response
Firewalls, intrusion detection and prevention systems (IDS/IPS)
Network segmentation and traffic monitoring
Secure routing, switching, and backbone infrastructure
Redundancy, failover, and disaster recovery mechanisms
Continuous monitoring for malicious activity and anomalies
Access to customer portals and services requires secure authentication
Strong password policies are enforced by default
Multi-Factor Authentication (MFA/2FA) is implemented where applicable
Keeping login credentials confidential
Not sharing passwords, PINs, or access tokens
Promptly reporting suspected compromise or unauthorized access
OneConnect will never request passwords, PINs, or authentication codes via email, SMS, or phone calls.
Use strong, unique passwords for OneConnect services
Avoid reusing passwords across multiple platforms
Change passwords periodically
Avoid using easily guessed information (names, dates of birth, phone numbers)
All credentials stored by OneConnect are encrypted using industry-standard cryptographic methods.
User sessions automatically expire after periods of inactivity
Sensitive actions may require re-authentication
Access logs and session activity are monitored to detect misuse
These controls reduce risks of unauthorized access and session hijacking.
Encryption of data in transit using secure protocols (e.g., HTTPS, TLS)
Encryption of sensitive data at rest
Role-based access controls
Secure key management practices
Keep devices updated with latest security patches
Use reputable antivirus and firewall software
Avoid using public or unsecured Wi-Fi networks for sensitive activities
Log out after completing sessions on shared devices
Fake emails, SMS, or websites impersonating OneConnect
Requests for login details, PINs, or payment information
Suspicious links or attachments
How to Verify Authenticity
Confirm official OneConnect domain names
Check for HTTPS and valid security certificates
Verify sender email addresses
Report suspicious communications immediately
Detects and investigates security incidents
Contains and mitigates threats promptly
Notifies affected parties where required by law
Reports incidents to regulators when applicable
Use OneConnect services lawfully and responsibly
Not attempt to breach or bypass security controls
Not introduce malicious software or excessive traffic
Report suspected vulnerabilities or incidents promptly
Failure to comply may result in service suspension or termination.
No system can be completely immune to risk
Service interruptions may occur due to factors beyond reasonable control
Services are provided on an “as is” and “as available” basis
Reviews and updates its security policies
Conducts audits and risk assessments
Improves controls in response to emerging threats
Trains staff on security best practices
OneConnect Infrastructure Limited
📧 Email: security@oneconnect.com.ng
📞 Phone: +234 805-555-1091
These Security Guidelines may be updated periodically.
The latest version will always be available on OneConnect’s official website.
If you have any questions about this policy, please contact us at support@oneconnect.com.ng