ISMS Corporate Policy

1. Scope

This policy applies to all information created or received by KAYAN HR SOLUTION.

This policy forms the basis of KAYAN HR SOLUTION's Information Security Management System (ISMS) related policies and procedures, based on the ISO/IEC 27001 International Standard, taking a risk-based approach to embed appropriate levels of information security controls and countermeasures.

2. Policy Statement

It is the policy of KAYAN HR SOLUTION to ensure that appropriate controls and countermeasures are put in place to protect corporate and client data, as well as KAYAN HR SOLUTION's information technology systems, services, and equipment. The purpose of the policy is to protect KAYAN HR SOLUTION's information assets from all threats, whether internal or external, deliberate, or accidental.

KAYAN HR SOLUTION is committed to protecting its information assets, personnel, privacy and intellectual property, computer systems, data, and equipment from all threats, whether internal or external, deliberate, or accidental, in a cost-effective manner. This shall be achieved with minimum inconvenience to authorized users and against threats to the level of service required by KAYAN HR SOLUTION to conduct its business.
KAYAN HR SOLUTION shall adopt the ISO/IEC 27001 Information Security Management System (ISMS) as a tool to implement a formal system for protecting the confidentiality, integrity, and availability of information.
KAYAN HR SOLUTION is committed to complying with regulatory and legislative requirements.
KAYAN HR SOLUTION is committed to encouraging information security improvements by engaging with its personnel, providing them with information security training and awareness, and enhancing their competences.
Information security should be aligned with KAYAN HR SOLUTION's strategic direction and business objectives.
Information security risks shall be managed based on KAYAN HR SOLUTION's Risk Management Methodology.
KAYAN HR SOLUTION is committed to continually improving its ISMS and information security posture.
KAYAN HR SOLUTION is committed to treating and resolving security incidents and suspected vulnerabilities according to their respective nature.
Objectives relating to information security performance will be established, monitored, and reviewed by the ISMS Steering Committee (ISMS-SC).
KAYAN HR SOLUTION will continually review this policy and its information security performance to ensure it improves over time.
All Managers are directly responsible for implementing this ISMS Policy and for ensuring staff compliance in their respective departments.
This policy is available to all KAYAN HR SOLUTION personnel and relevant interested parties. All KAYAN HR SOLUTION personnel are made aware of their commitment and the contents of this policy.

3. Compliance Statement

Compliance with this policy and all other supporting policies, standards, and procedures is mandatory for all staff and third parties. Any violation of this policy or any other IS policies, standards, or procedures will result in corrective action by management. Disciplinary action will be consistent with the severity of the violation, as determined by an investigation and deemed appropriate by management.