Information Security Statement
Know how to recognise risks and report a security concern.
A standard for protecting information
KFC’s security standard sets requirements for the confidentiality, accuracy and availability of information used in lending and customer support. It applies to technology, paper records and suppliers. Detailed access rules, recovery instructions and investigation procedures belong in the controlled internal policy system.
Control expectations
The security programme should assign system owners, limit access by role, review privileged accounts, protect sensitive transfers, maintain updates and test recovery from backups. Staff and suppliers need clear instructions for handling information and reporting incidents. If you need to send sensitive documents, ask KFC which approved channel to use before sending them.
Protect yourself
Use KFC’s published contact details to check an unexpected message, urgent payment request or change to repayment instructions. Do not rely only on a caller’s name, a logo or a screenshot. Never share passwords, PINs or one-time authentication codes with someone offering help with a loan. Ask for a verified, appropriate route before sending sensitive documents.
Report a suspected problem
Call +265 880 759 004 or use info@kingdomfirstcp.com to request the appropriate security contact. In your first message, describe the issue without sending customer records, credentials or an exploit. State the affected page or service and when you noticed the problem. Do not access other people’s information or continue testing beyond your authorisation.
Response and limits
A reported concern should be assessed, assigned and investigated, with evidence preserved and required notifications considered. Ordinary email is not an anonymous or guaranteed confidential incident portal. No website can promise freedom from every outage or attack. If a concern involves immediate risk to an account or device, contact the relevant provider through its official support channel as well.