Information Security Management System Policy

Date: November 17, 2023

POILABS has established, implemented, and maintained an information security management system. In this context, the POILABS management commits to:

• Fulfilling applicable conditions, legal and other requirements within the management system;
• Continually improving the management system;
• Determining, understanding, and regularly meeting the needs and expectations of customers and relevant parties, as well as legal and other requirements;
• Identifying and addressing risks and opportunities that may affect the conformity of products and services, as well as enhancing customer satisfaction;
• Sustaining a focus on increasing customer satisfaction;
• Enhancing the performance of the management system;
• Managing risks associated with the use of mobile devices under the information security management system, and establishing supportive security measures;
• Implementing supportive security measures to protect information accessed, processed, or stored in remote work environments under the information security management system;
• Effectively applying access control based on business and information security requirements under the information security management system;
• Ensuring the use of cryptographic controls to protect information and effectively managing cryptographic keys, their protection, and their lifecycle compliance;
• Ensuring compliance with clean desk and clean screen policies;
• Managing and testing the backup of information, software, and system images;
• Protecting information transfer through all types of communication means;
• Managing system administration with suppliers, subcontractors, contractors, and stakeholders, and keeping the necessary communication secure;
• Managing risks in the most effective and efficient manner, minimizing risks through all necessary activities;
• Encouraging active participation of employees in the information security management system and ensuring the continuity of this internal communication;
• Effectively making activities under the information security management reliable through technical, administrative, and process management.