This policy statement outlines INTEGRITI PADU SDN. BHD. (IPSB Technology)’s commitment towards Information Security Management.

IPSB Technology has legislative, moral and contractual responsibilities to ensure that all information is protected adequately. Our information security management system is based upon the requirements of the international standard ISO 27001. Using this framework and the deployment of applicable security controls and technologies, we will assess, manage, continuously review and improve information security related risks. We shall also ensure compliance with any applicable legal and regulatory information security requirements.

Through designing for security, establishing policies and training, we can help protect the information we handle against various growing information security threats.

Security controls implemented to safeguard the information should mitigate threats to prevent harm from coming to those we are assisting and ensure we can continue to provide first-class services.

IPSB Technology has developed a series of policies providing guidelines in operating at the highest standards when securing information. These policies will also help demonstrate to our trusted clients and partners that we operate with integrity and accept that we are accountable for protecting the information entrusted.

The policies created are based on the following fundamental security principles:

• Confidentiality – Protecting information from unauthorised disclosure.
• Integrity – Protecting information from unauthorised or erroneous modification.
• Availability – Ensuring that information and associated services are available when and where required to meet IPSB Technology’s service needs.
• Legislative & Regulatory – Requirements regarding intellectual property rights, data protection and privacy of personal information will be met.
• Business Continuity – Plans will be developed, tested and maintained.
• Knowledge Update – Security training will be made available for all employees.
• Priority on Prevention – Threats analysis and risk evaluation will be carried out continuously.

The policies apply equally to all employees or contracted parties accessing information or information processing systems. IPSB Technology will ensure that all users are issued with the appropriate policies, can access them easily and understand the importance of adhering to them.

The policies will be reviewed and updated to meet the changing business requirements.