We, at GSPANN Technologies, are committed to “establish, monitor, and continually improve our safeguards for the confidentiality, integrity, and availability of all our physical and electronic information assets to ensure that regulatory, operational, and contractual requirements are fulfilled.”

We are committed to ensuring that:

• Regulatory, legislative, and industry-specific compliance requirements related to operations are met.
• The confidentiality of information is protected, and disclosure of valuable or sensitive information is prevented.
• The integrity of information is maintained to ensure its accuracy, completeness, and reliability.
• The availability of information is ensured to meet business needs and client requirements.
• Employees are empowered through regular awareness and training programs to create a culture of security.
• A robust incident management process is in place and regularly reviewed to ensure that all breaches of information security, actual or suspected, are promptly reported, investigated, and resolved.
• Risks are identified, assessed, and mitigated to acceptable levels through a comprehensive risk management framework.
• The information security management system (ISMS) is continually improved based on feedback, audits, and evolving security threats.
• Appropriate resources, including technology, personnel, and processes, are allocated and optimized to implement, operate, and review an effective ISMS.
• Business continuity plans are established and tested periodically to minimize the impact of disruptions.
• Third-party vendors and partners adhere to GSPANN’s information security policies and contractual obligations.

All stakeholders are responsible for implementing the respective security policies and procedures within their areas of operation and ensuring adherence by their team members.

GSPANN shall follow a formal disciplinary process for employees who allegedly violate the information security policies and procedures.

GSPANN is committed to taking all necessary steps to ensure that its Information Security policy is clearly understood, consistently implemented, and actively maintained at all levels of the Organization.