Procedure Templates

The objective of the Individual Computing Equipment Usage Policy is to help the Company Management enforce the rules regarding the use of individual computing equipment.

The Information Assets Classification Policy sets out the principles under which information is to be classified.

Information classification is a process intended assigning a level of sensitivity to information/ data as it is being created, processed, stored or transmitted.

The Information Classification Procedure describes the actions necessary to comply with the Company’s Information Security Policy and Information Classification Policy. Security classifications are used to indicate the need and priorities…

The Information Ownership, Classification and Handling Policy sets out the control objectives and minimum standards for the ownership, classification and handling of all forms of information.

The Company has adopted an Information Risk Management Policy (“Policy”) to describe rules and expectations for both itself and all its direct and indirect subsidiaries countrywide (together with the Company)…

The purpose of the Information Security Incident Handling Policy is to develop a framework for timely and effective handling of information security incidents.

The objective of the Information Security Incident Handling Procedure is the determination of a specific incident handling direct procedure, in order the negative consequences to be reduced and the Company…

The objective of the Information Security Incident Policy is to set up the foundation of security incidents management in order to minimize the damage and malfunctions, and to monitor and…