Information Security Objectives
The objective of B2BSlots in managing information security is to ensure core and support business operations continue with minimal disruption.
B2BSlots will ensure that all information used or stored by B2BSlots has full integrity and availability. B2BSlots will guarantee that all relevant information is managed and stored with appropriate confidentiality procedures.
Information Security Policy
The purpose of this Policy is to protect the organization's information assets from all threats, whether internal or external, deliberate or accidental.
The CEO of B2BSlots has approved this Information Security Management System [ISMS] Policy.
The organization's policy is to ensure that:
- Information should be available with minimal disruption to staff and the public as required by business processes. This will ensure that critical information and services are available to users when and where they need them;
- The integrity of this information will be maintained. This means protecting the accuracy and completeness of information by safeguarding against unauthorized modification;
- The confidentiality of information is not limited to research, third parties, personal and electronic communication data will be ensured. This will protect valuable or sensitive information from unauthorized disclosure or unavoidable disruption;
- Regulatory and legal requirements will be met. This will ensure that the organization remains compliant with relevant business, national, and international laws;
- A Business Continuity Management Framework will be provided and a Business Continuity Plan will be produced to address disruptions to business activities and protect critical business processes from the effects of major failures or disasters. The Business Continuity Plan will be maintained and tested;
- Information security education, awareness, and training will be provided to staff and relevant outsiders;
- All information security breaches, actual or suspected, will be reported to and investigated by relevant authorities not limited to the Incident Response process;
- Appropriate access controls will be maintained and information protected from unauthorized access.
ISMS Risks
Information security in B2BSlots is managed through a Risk Management Framework.
Policies, Procedures, and Guidelines not limited to Information Security will be provided in hard copy and online via the intranet system to support the ISMS Policy.
Responsibilities
It is the responsibility of every staff member to adhere to the ISMS Policy. All managers are directly responsible for implementing the ISMS Policy within their units and for compliance by their staff.
The Management Representative is the Chief Security Officer and has direct responsibility for planning, designing, implementing, and operating the ISMS within B2Bslots. They are also involved in writing and/or managing the development of related policies, procedures, and guidelines not limited to information security. The Internal Audit Unit has direct responsibility for verifying the effectiveness of the ISMS Policy.
This ISMS Policy is subject to review when significant changes occur within the organization.