Information Security Management – TRADE COPIERS – deal in used copiers, toner cartridges and consumables to both the trade and the public

ISO 27001 is the most widely recognised international standard for information security and shows that Trade Copiers has robust data security procedures in place.

The standard specifies the requirements for implementing, maintaining and continually improving an Information Security Management System within the context of the organisation. Trade Copier’s security management system includes policies around access control, risk management, physical security, business continuity, training & awareness; all underpinned by a comprehensive set of technical procedures and controls that are reviewed on a regular basis.

TRADE COPIERS INFORMATION MANAGEMENT POLICY

The ISMS Manager of Trade Copiers Limited has an objective of ensuring business continuity and therefore minimising the risk of damage by preventing security incidents and reducing their potential impact. The goal of this policy is to protect the organisation’s information assets against all internal, external, deliberate or accidental threats.

The ISMS Manager will ensure that:

Information will be protected against any unauthorised access
Confidentiality of information will always be assured
Integrity of Information will be maintained
Availability of Information for business processes will be maintained
Legislative and regulatory requirements will be met
Business continuity plans will be developed, maintained and tested
Training on information security will be available for all employees
All actual or suspected information security breaches will be reported to the ISMS Manager and will be thoroughly investigated

Procedures are available to support the policy, Including virus control measures, passwords and continuity plans.

Business requirements for the availability of information and systems will be met.

The ISMS Manager is responsible for maintaining the policy and providing support and advice during and when implemented.

All managers are directly responsible for implementing the policy and ensuring staff compliance in their respective departments.

Compliance with this Information security policy is mandatory.

This policy will be communicated to all staff employed by the organisation and will be subject to an annual review.