Information Security Incident Policy

To maintain Information Security in ongoing operations, it is necessary to have developed and practiced a policy for the handling of security incidents. A security incident refers to an event whose impact could cause significant loss or damage. To prevent or contain any loss or damage, security incidents should be dealt with swiftly and efficiently. If there is a predefined procedure available to be invoked, then reaction times can be minimized. The possible loss or damage which could occur in a security incident can affect both the confidentiality and integrity of data and also its availability.

The objective of the Information Security Incident Policy is to set up the foundation of security incidents management in order to minimize the damage and malfunctions, and to monitor and learn from such incidents. The reaction to a security incident aims to protect and restore the normal operating condition of any information asset of the Company and of the supporting infrastructure: computers, systems, systems software, applications, and services.