To protect our information assets and complying with all applicable laws and regulations, we are committed to:

• Confidentiality: Safeguard sensitive information from unauthorized access to protect
  both company and customer data.
• Integrity: Ensure that all information is accurate, complete, and consistent by implementing controls to prevent unauthorized modification.
• Availability: Ensure that critical information and systems remain accessible to authorized users when needed to support operational efficiency and business continuity.
• Risk Management: Integrate a robust risk assessment process into our security practices, enabling us to identify, evaluate, and mitigate potential security risks.
• Compliance: Adhere to all relevant legal, regulatory, and contractual obligations concerning information security, such as the Cybersecurity Act 2024 (Act 854) and international standards like ISO/IEC 27001:2022.
• Continuous Improvement: Regularly review and enhance our ISMS to ensure its effectiveness, address new and evolving security threats, and adapt to changes in business processes and technology
• Security Awareness: Promote a culture of security awareness across all levels of the organization through ongoing training and communication, ensuring that employees understand their roles and responsibilities in safeguarding information