Information Security Policy

It is our policy to operate and maintain an Information Security Management System (ISMS) to the requirements of ISO 27001:2013. Our ISMS is an acknowledgement that information is a critical business asset and that protecting the confidentiality, integrity and availability of information assets from all threats whether internal, external, deliberate or accidental is a business priority.

We will ensure we have implemented appropriate controls to secure our information assets, and those we are responsible for, using physical, procedural, staff and technical security measures.

In addition, we will:

Comply with all applicable laws, regulations and applicable requirements related to information security
Implement improvement initiatives to achieve continual improvement of the ISMS including risk assessment and risk treatment strategies
Communicate Information Security objectives and review of performance in achieving these objectives, throughout the organisation and to interested parties
Work closely with interested parties in preserving Information Security
Complete Information Security Awareness Training with all staff
Constantly strive to meet and where possible exceed customer’s expectations

Responsibility for upholding this policy is the responsibility of all workers with full support of the company management.

We shall review, measure and monitor our Information Security framework, documentation and implemented controls on an ongoing basis to ensure their relevance and effectiveness in protecting our information assets with the aim of continual improvement of our systems and performance. Formal review of the ISMS and information security objectives is completed at least annually and documented during Management Review.

Information Security Policy

Renewing your phone system? Avoid costly surprises.