IT Managed Services Limited are committed to safeguarding the confidentiality, integrity, and availability of all physical and electronic information assets throughout our organisation. As a UK-based Information Technology company, we recognise the importance of protecting our information assets to maintain trust and compliance with legal and regulatory requirements.
Our Commitment
- Confidentiality:
- We ensure that information is accessible only to those authorised to have access. We implement strict access controls and confidentiality agreements to protect sensitive information.
- Integrity:
- We maintain the accuracy and completeness of information and processing methods. We employ robust data validation and verification processes to prevent unauthorised alterations.
- Availability:
- We ensure that authorised users have access to information and associated assets when required. We implement redundancy and disaster recovery plans to maintain business continuity.
Information Security Objectives
- Risk Management: We identify, assess, and manage information security risks to minimise potential impacts on our operations.
- Compliance: We comply with all relevant legal, regulatory, and contractual requirements related to information security.
- Awareness and Training: We provide regular information security training and awareness programmes to all employees to ensure they understand their responsibilities.
- Incident Management: We have established procedures for reporting, managing, and resolving information security incidents promptly and effectively.
- Continuous Improvement: We regularly review and update our information security policies, procedures, and controls to adapt to evolving threats and business needs.
Roles and Responsibilities
- Management: Our management team is responsible for ensuring the implementation and maintenance of this Information Security Policy. They provide the necessary resources and support to achieve our information security objectives.
- Employees: All employees are responsible for adhering to this policy and reporting any security incidents or vulnerabilities. They are expected to follow best practices and participate in ongoing training.
- Information Security Officer: The Information Security Officer is responsible for overseeing the information security programme, conducting risk assessments, and ensuring compliance with this policy.
Policy Review
This Information Security Policy will be reviewed annually or whenever significant changes occur to ensure its continued relevance and effectiveness.
________________________
Revised: September 2024
