The BackupExperts policy set comprises the master Information Security
Policy and a number of topic-specific policies that elaborate it. Every
member of staff is required to read and acknowledge the policies
applicable to their role, and to re-acknowledge them after any material
change.
| Policy | Status |
|---|---|
| Information Security Policy | Draft |
| Policy | Annex A | Status |
|---|---|---|
| Backup | A.8.13, A.5.30, A.8.24 | Draft |
| Incident response | A.5.24–A.5.28 | Draft |
| Access control (planned) | A.5.15–A.5.18, A.8.2–A.8.5 | — |
| Cryptography (planned) | A.8.24 | — |
| Acceptable use (planned) | A.5.10, A.8.1 | — |
| Supplier security (planned) | A.5.19–A.5.23 | — |
| Data classification (planned) | A.5.12, A.5.13 | — |
| Business continuity (planned) | A.5.29, A.5.30 | — |
| Privacy / personal data (planned) | A.5.34 | — |
Policies are issued under the authority of the Managing Director of
BackupExperts, who is also the appointed owner of the ISMS. Breaches of
policy are addressed under the disciplinary procedure referenced in the
master Information Security Policy.