INFORMATION SECURITY POLICY STATEMENT

At e-Crime Bureau, we are committed to protecting the confidentiality, integrity, and availability of information assets, including client data, intellectual property. This policy supports our obligation to:

1. Safeguard Information Assets: Implement appropriate controls to protect data against unauthorized access, disclosure, alteration, and destruction.
2. Ensure Legal and Regulatory Compliance: Adhere to all applicable laws such as Data Protection Act, 2012 (ACT 843), Cyber Security Act 2020 (ACT 1038), Electronic Transaction Act 2008 (ACT 772) and applicable international laws, regulations, contractual obligations and agreements related to information security and data protection.
3. Reduce Security Risks: Identify, assess, and mitigate risks that could lead to information security incidents or data breaches.
4. Maintain Business Continuity: Develop and maintain plans and procedures to ensure the resilience and continuity of business operations in the face of disruptions.
5. Enhance Security Posture: Continuously monitor, review, and improve our information security practices to adapt to evolving threats and best practices.

All interested parties are expected to understand and comply with this policy and contribute to the Bureau’s security efforts. For this Policy Statement, interested parties include but not limited to shareholders, board of directors, employees, clients, customers, regulatory bodies, competitors, suppliers, media and public.