PROTECTION & SECURITY
INFORMATION SECURITY MANAGEMENT SYSTEM

The scope of IbCom’s ISMS includes information security applicable to:

• All employees, contractors, consultants, products and services, customers, clients, partners, vendors.
  
  
• All physical and virtual business offices and operations.
  
  
• All physical and virtual business systems and processes.
  
  
• All physical and virtual, assets and technology, including desktop and laptop computers, mobile devices, physical and virtual networks, data centres.
  
  
• All physical and cloud-based business and customer information (data) repositories.
  
  
• All internal and external business communications.

• Identifying and assessing information security risks and treating those risks so that they are acceptable.

• Reducing or eliminating information security incidents.

• Minimising the negative impact of any such incidents.

• Continually improving the company’s ability to assess, detect, avoid and ameliorate information security risks and incidents.

• Maintaining esteem for and the credibility of the company’s services and MyDigitalStructure brand.

• Protecting the privacy of all stakeholders and particularly the personal information of IbCom’s customers.

• This policy applies to all the ISMS and to all of the organisation.

• Management will commit to the implementation and maintenance of this Security Policy, as well as the procedures and policies required to support this Security Policy.

• All employees will be educated in information security principles and are responsible and accountable for information security relevant to their roles.

• ibCom’s information security risks are assessed, managed and treated as necessary so that the company’s information security risks remain within acceptable parameters.

• ibCom’s information security controls are adequately provisioned for and funded.

• The company’s security posture is for continuous improvement.

• Violations of this or any related policy or procedure by any employee may result in disciplinary action and/or dismissal and/or criminal prosecution and breaches of information security will not be tolerated.

• Fundamental information security pillars:
  # Separation of concerns and purpose
  # Start with the ‘best of breed’ foundations for security and architecture
  # Keep security it simple
  # Give the information (data) owner control
  # Do you have a reason to know?
  
  

• Test, test, test – Top to Bottom & End to end, for all internal and external threats eg penetration testing of the end points

• Listen to the community

• Maintain best practice

• ibCom Directors are responsible for the suitability, adequacy, implementation and effectiveness of the ISMS.
  
  
• ibCom’s Chief Risk Officer is responsible for ensuring the ISMS conforms to the requirements of ISO 27001 & ISO 270017 and for reporting on the performance of the ISMS to the Directors.
  
  
• ibCom’s employees, contractors and consultants are trained in their information security responsibilities and are held accountable.

• Information security is architected and embedded into all facets of the business operations and technologies.

• Customers, suppliers and partner’s confidence in the confidentiality, integrity and availability of the organization's information will be preserved.

• Information security incidents will be mitigated and not result in legal or compliance breaches, significant information loss, financial losses or reputational damage or disruption to the business.

• Shareholder value will be preserved or enhanced through the implementation of organisational wide ISMS