Physical Security Policy

This document defines the Physical Security Policy for the Company. In addition to this policy, each office within the country will maintain a Physical Security plan detailing location specific procedures.

The objective of this policy is to outline the approach to manage physical security in order to ensure that our people, physical infrastructure and assets are resilient and properly protected against a variety of threats. Threats to the security of our people, physical and electronic infrastructure will be assessed through threat and security risk assessments at a variety of levels as determined by IT Security and the wider business needs.

All employees should comply with the clauses that have been identified as applicable to them. They will be responsible for ensuring that relevant visitors and identified third party accessing the Company’s physical and electronic infrastructure and Company information held follow the processes applicable to them.

The scope and statements within this policy shall also apply to all personal data processed by the Company. “Processing” in this context means any operation concerning personal data throughout the information lifecycle; this includes but is not limited to personal data collected, stored, viewed, transferred, analyzed or communicated in hard copy, oral or electronic form.