C-O Information Security Policy

C-O Information Security Policy coadmin March 24, 2023

The Management at Capital Outsourcing is committed to the security of its information and continual improvement in the security setup of all its departments. Capital Outsourcing aims to provide its customers with a service that meets the information security, Cloud Security & Business Continuity requirements and to provide Capital Outsourcing services in the event of any impact to a minimum agreed level.

The Management at Capital Outsourcing ensure that:

      • Information will be protected against any unauthorized access
      • Confidentiality of information will be assured
      • Integrity of information will be maintained
      • Availability of information for business processes will be maintained
      • Legislative and regulatory requirements will be met
      • Business continuity plans will be developed, maintained and tested
      • Information security, Cloud Security & Business Continuity training will be available for all employees
      • All actual or suspected information security, Cloud Security & Business Continuity breaches will be reported to the Information security, Cloud Security & Business Continuity Officer and will be thoroughly investigated

The Management at Capital Outsourcing is fully committed to being able and ready to deal with any adverse incidents and impacts that should disrupt Capital Outsourcing business operations and consequently affect its interested parties. Capital Outsourcing objective is to continually improve its information security, Cloud Security & Business Continuity readiness and performance, while offering to customers and other interested parties a secure, safe, effective and professional service.

We thrive to cooperate with competent and qualified experts to meet the Information security, Cloud Security & Business Continuity Management System requirements stated in Standard ISO 27001:2013 and to continually improve Capital Outsourcing’s processes so to ensure Capital Outsourcing’s goals for information security, Cloud Security & Business Continuity, efficiency and customer satisfaction are always met and by securing internal and external accesses.

Capital Outsourcing strategic objective is to include a framework for setting targets and to establish an overall sense of direction and principles of action with regard to information security, Cloud Security & Business Continuity.

Capital Outsourcing management considers business and legal or regulatory requirements, and contractual security obligations compliant with the ISO 27001:2013 standard.

Capital Outsourcing management will set a strategic risk management context in which the establishment and maintenance of information security, Cloud Security & Business Continuity management policy will take place.

Capital Outsourcing management will establish criteria against which risk will be evaluated.

Capital Outsourcing management will ensure that all users understand their own responsibilities for protecting the confidentiality, availability and integrity of the data they handle.

Capital Outsourcing management will preserve an appropriate level of the following: Confidentiality, Integrity and Availability.

Capital Outsourcing management will ensure that information is created, used and maintained in a secure environment.

Capital Outsourcing management will ensure that all of the company’s computing facilities, programs, data, network and equipment are adequately protected against loss, misuse or abuse.

Capital Outsourcing management will ensure that all employees and third-party personnel are aware of and fully compliant with the policy statement and the relevant supporting procedures.

Capital Outsourcing management will create awareness that appropriate security measures must be implemented as part of the effective operation of Information security, Cloud Security & Business Continuity.

All Capital Outsourcing employees are aware of their responsibilities and their authorities to ensure that information security, Cloud Security & Business Continuity objectives are met and to ensure continual improvement.

 

General Manager

Chadi Ghazal