Information Security Policy

Information Security Policy

B. & I. Mantzaris S.A. is committed to protecting the information it manages within its activities' scope from any internal, external, legitimate, or illegitimate threat. The company implements and maintains an Information Security Management System (ISMS) according to ISO/IEC 27001:2022 standard to achieve this commitment.

Our objectives for Information Security are:

• Ensuring that information remains accurate and complete and is not altered or destroyed without authorization.

• Ensuring that information is not disclosed to unauthorized individuals, entities, or processes.

• Ensuring that information is accessible and usable when required by authorized users.

• Complying with all relevant legal and regulatory information security requirements.

• Raising staff awareness and providing training on information security management to enhance security throughout the company.

• Recording and reporting violations and suspicious incidents to the Information Security Management System Officer and investigating them.

• Taking the necessary measures to prevent and address information security incidents.

• Fully satisfying the requirements of interested parties by continuously monitoring technological developments.

• Continuously improving the ISMS to ensure its effectiveness and efficiency.

• Full compliance with the ISO/IEC 27001:2022 standard requirements.

The management of B. & I. Mantzaris S.A. is committed to providing the necessary resources and support to achieve the above objectives and to ensure the continuous improvement of the company’s information security policy.

This policy applies to all company operations and is supported by the following:

• Implementation and maintenance of appropriate procedures and controls to protect information.

• Ongoing training and awareness initiatives to ensure staff understand their obligations and responsibilities.

• Regular reviews of the ISMS and adoption of improvement actions to address new challenges and achieve better security.

The commitment of B. & I. Mantzaris S.A. to information security is vital for protecting the data of its customers, employees, and partners while ensuring the integrity, confidentiality, and availability of information.

On behalf of the Management,

1/5/2024