Information Security Policy

Last updated: April 3, 2024

Overview

An Information Security Policy Statement has been made to outline Trading Science’s commitment to maintaining and improving information security within its business environment including interested parties both internal and external.

Purpose

The purpose of this policy statement is to outline Trading Science’s approach to Information Security. 

Scope

This policy applies to employees, contractors, consultants, temporaries, and other workers at Trading Science Ltd, including all personnel affiliated with third parties. This policy applies to all information assets that are owned or leased by Trading Science Ltd. 

Policy Statement

An Information Security Policy has been established, which supports the strategic aims of the business. The company is committed to maintaining and improving information security thereby minimising our exposure to risk. It is our stated aim to:

• Ensure the confidentiality of corporate, and client information; 
• Protect sensitive information (however stored) against unauthorised access; 
• Maintain the integrity of all information; 
• Ensure the availability of information, as required; 
• Provide information security awareness training for all staff; 
• Ensure that the expectations and requirements of all interested parties, in relation to Information Security, are met; 
• Make information available to authorised business processes and employees promptly when it is re-quired; 
• Meet all applicable regulatory and legislative requirements;
• Produce business continuity plans for business activities that are regularly maintained and tested; 
• Ensure that all breaches of information security, actual or suspected, will be reported to and investigated by Trading Science ISMS security personnel; 
• Identify opportunities for improvement and as appropriate act on them for the purpose of continued improvement in the ISMS; 
• Comply with the requirements of ISO 27001 as a means to demonstrate to interested parties and others the integrity of our ISMS; and 
• Communicate this policy statement to the public, through our website and on request. 

The policy is dynamic and includes a commitment to continual improvement through a process of incident reporting, risk assessment and regular audits. It provides a framework for establishing and reviewing security objectives. Management is responsible for communicating the company’s Information Security Policy and making sure it is understood at all levels.