Integrated Management System Objective and Policy Statement
Purpose
This policy statement defines the framework within which the integrated management system (information security management system IT service management and business continuity management system) will be managed across Duplo and demonstrates management commitment and support for integrated management systems throughout Duplo.
This policy is the primary policy from which all information security business continuity and service management related policies emanate.
Scope
This policy is applicable to all Duplo personnel, contractors, vendors and other parties, and covers all information entrusted to or owned by Duplo and stored, processed, or transmitted on the organizations information systems and operated by the organization.
Integrated Management System Objectives
Objective 1 – Achieve 100% protection of the confidentiality and integrity of Duplo Information assets through the implementation and integration of measures within the framework of the Information Security Management System (ISMS), Business Continuity Management System (BCMS), and IT Management System (ITMS).
Objective 2 – Foster a 90% Information Security Awareness culture across the organization by incorporating awareness initiatives into the broader IMS, encompassing principles from ISMS, BCMS, and ITMS.
Objective 3 – Ensure a 99.6% availability rate, demonstrating the resilience of information systems, by aligning efforts with the IMS that integrates Information Security Management, Business Continuity Management, and IT Management practices for a comprehensive approach to managing risks and ensuring continuity.
Objective 4 – Achieve 100% compliance with Duplo’s legal, regulatory, and contractual obligations related to information security business continuity and IT service management.
Integrated Management System Policy
Duplo is committed to the confidentiality, integrity, and availability of her information assets and shall implement measures through the establishment. Duplo is committed to continual improvement of her information security and business continuity program to protect the organization’s information assets against all threats.
Duplo is also committed to complying with all applicable legal, regulatory, and contractual requirements related to information security and business continuity in her services and operations.
All users and custodians of information assets owned by or entrusted to Duplo shall comply with this policy and exercise a duty of care in relation to the storage, processing, and transmission of the organization’s information and information systems. Additionally, Duplo places a strong emphasis on effective IT service management practices to further enhance the confidentiality, integrity, and availability of its information assets.
Contact Us
If you have any complaints, feedback and/or questions about us, our Services and/or these Policies, you may contact us at hello@tryduplo.com.