Information Security Policy

AB HANDSHAKE CORPORATION

Date: 01/01/2024
Valid until 31.12.2027

This policy outlines the essential information security requirements mandated for AB Handshake Corporation. Serving as a comprehensive document, it encompasses all other security policies, standards, and guidelines.

AB Handshake Corporation is dedicated to upholding the confidentiality, integrity, and accessibility of information stored and processed within its domain, including data belonging to the corporation itself, employees, partners, customers, suppliers, and their clients. To achieve this objective, AB Handshake Corporation has instituted an Information Security Management System (ISMS) compliant with ISO 27001 standards. The corporation ensures the ongoing enhancement and maintenance of the ISMS.

The management of AB Handshake Corporation exhibits leadership and dedication towards the Information Security Management System (ISMS) by:

• Establishing information security policies and objectives that align with the organization's strategic direction;
• Integrating ISMS requirements into the organization's processes;
• Designating clear roles and responsibilities;
• Ensuring adequate resources for the ISMS;
• Encouraging ongoing enhancement of the ISMS.

The primary goals of the Information Security Management System (ISMS) are as follows:

• Guaranteeing adherence to relevant information security laws and meeting the expectations of stakeholders;
• Securing cyber resilience and maintaining operational continuity within AB Handshake Corporation;
• Recognizing information security vulnerabilities and mitigating them to a satisfactory extent;
• Safeguarding customer and end-user data against unauthorized access;
• Maintaining uninterrupted provision of essential services.

The ISMS has specific goals, which include:

• Formulating and executing policies, protocols, and steps to ensure the security of information.
• Monitoring and evaluating security incidents, conducting inquiries, and implementing corrective actions.
• Restricting unauthorized access and updating anti-fraud measures.
• Enhancing employee awareness and expertise in information security matters.

The core principles of the ISMS are:

• Integrating information security into every procedure, process, or task within AB Handshake Corporation.
• Ensuring all AB Handshake Corporation employees prioritize information security in their daily responsibilities.
• Continuously enhancing the suitability, sufficiency, and efficiency of the ISMS.

This Policy is subject to periodic assessment, revision and updating every year or, if necessary, at shorter intervals to reflect changing conditions.

Version 1.0.
Approved by: Nadejda Papernaia