INFORMATION SECURITY MANAGEMENT SYSTEM POLICY

Objective:

The Organisational level information security policy is to prescribe a mechanism that will assist in identifying, preventing, detecting, and correcting the compromise and misuse of the information and Information Technology Infrastructure, and the top management is committed to implementing these in full by:

“To create an environment that maintains Confidentiality, Integrity and Availability of Acheron, its customers’ and other stakeholder’s information & assets”

• The fulfilment of need and expectation of interested parties like Customers, External Providers, Statutory and Regulatory bodies
• Secure delivery, reliable services for users and other interested parties who need confidence and assurance on the platform is fit for their purpose of sharing and working with sensitive information
• The Efficient communication and management resources to meet Information security and Information Technology enabled service requirements
• Maintaining a risk management system to identify and control information security.
• The awareness on the needs and responsibilities of Information Security Management requirements among our stakeholders.
• Providing secure solutions to the customer including their business understanding, contractual, regulatory information are secured by the top-level management.
• The consistency in meeting customer's expectations and continually improving the Information security management System Performance.
• The appropriate protection of information assets and Confidentiality, Integrity and Availability of information at all times in the workplaces and processes.
• Managing and reviewing business continuity procedures for all critical systems and processes of the IT Department.
• Handling Exceptions and deviations from the policy, if justified, are approved exclusively by the CISO. There will be a business justification for any exceptions or deviations from this policy with the consent of MR. For major deviations, the CISO seeks stakeholder approval.