The Entity has implemented physical and/or logical labelling of information according to the documented Data Classification Policy
profile_icon
| Sep 08, 2023
Entity has established an Information Security Awareness training, and its contents are available for all staff on the company employee portal.
profile_icon
| Sep 08, 2023
Entity has a documented Confidentiality Policy, and makes it available for all staff on the company employee portal.
profile_icon
| Sep 08, 2023
Entity has a documented Vendor Management Policy that provides guidance to staff on performing risk assessment of third-party vendors.
profile_icon
| Sep 08, 2023
Entity has a documented Risk Assessment and Management Policy that describes the processes in place to identify risks to business objectives and how those risks are assessed and mitigated. The objectives incorporate Entity’s service commitments and system requirements.
profile_icon
| Sep 08, 2023
Entity ensures that all planned changes undergo a review and approval process as per the guidelines documented in the change management policy
profile_icon
| Sep 08, 2023