ISMS STATEMENT

ISMS POLICY STATEMENT

At Ethnos Cyber Limited, we recognize the paramount importance of information as a strategic asset. This Information Policy articulates our commitment to the responsible and secure management of information throughout its lifecycle. Our organization is dedicated to maintaining the confidentiality, integrity, and availability of information, and to promoting a culture that values and protects this critical resource.

1. Information Governance:

Ethnos Cyber Limited is dedicated to upholding Information Security through the implementation and adherence to the Information Security Management System (ISMS), aligning with international best practices and the ISO/IEC 27001:2022 standard. This comprehensive approach includes Information Security policies, procedures, and controls. Our commitment involves a thorough understanding and effective management of risks associated with Information Security, ensuring increased certainty and confidence for our stakeholders, employees, customers, suppliers, and the communities in which we operate. Striking a careful balance between information security risks and business benefits enhances our overall business performance and minimizes potential future exposures.

2. Data Security:

The security of information is a top priority. Ethnos Cyber Limited implements comprehensive measures to safeguard information from unauthorized access, disclosure, alteration, and destruction. This includes the use of encryption, access controls, and regular security assessments.

3. Data Privacy:

Respecting the privacy rights of individuals is integral to our information practices. We adhere to principles of transparency, consent, and data minimization, ensuring that personal information is handled responsibly and in accordance with applicable data protection laws.

4. Employee Responsibilities:

All employees are integral to the success of our information management efforts. Through training and awareness programs, we ensure that our workforce understands their responsibilities in handling information securely and ethically.

5. Incident Response and Reporting:

In the event of suspected information security incident, Ethnos Cyber Limited is prepared to respond promptly and effectively. Employees are encouraged to report any suspected incidents to the designated channels to enable swift action and resolution.

We are committed to the continuous improvement of our information policies and practices. Regular assessments, audits, and feedback mechanisms are in place to identify areas for enhancement and ensure that our information management processes remain robust and effective.