Looking after the confidentiality, integrity, and availability of your information is integral within everything we do.
1. Policy objectives
- To protect the information assets that Flexible Power Systems (“FPS”) processes and has access to, and to ensure the ongoing maintenance of their confidentiality, integrity, and availability.
- To ensure controls are implemented that provide protection for information assets and are proportionate to their value and the threats to which they are exposed.
- To ensure we comply with all relevant legal, regulatory, contractual, and other applicable requirements relating to information security.
- To continually improve our Information Security Management System (“ISMS”) and its ability to withstand threats that could potentially compromise information security.
2. Scope
This policy and its sub-policies apply to all people (including contractors), processes, services, technology, and assets within the FPS ISMS scope statement.
3. Statement of intent
FPS believes that despite the presence of threats to the security of such information, all security incidents are preventable. We are committed to achieving policy objectives through:
- Maintaining an ISMS that is certified by a UKAS-accredited Certification Body as compliant with ISO 27001:2022.
- Systematically identifying security threats and applying a risk assessment procedure that will identify and implement appropriate control measures.
- Regular monitoring of security threats and testing of the effectiveness of control measures.
- Maintaining a risk treatment plan that is focused on eliminating or reducing security threats.
- Providing appropriate information, instruction, and training so that all staff are aware of their responsibilities and legal duties and can support the operation of the ISMS.
- Maintaining all company ISMS policies and procedures.