ActiveLink Information Security Policy

ActiveLink upholds its commitment to information security across all its operations. To achieve this goal, the company has implemented an Information Security Management System, in accordance with ISO 27001:2013 and the rules and regulations set by the Data Privacy Act of 2012.

The purpose of this policy is to establish the baseline controls for the protection of ActiveLink information systems.

We ensure that we are:

• Compliant with applicable laws and regulations.
• Compliant to agreed commitments with interested parties (Clients vendors, suppliers).
• Compliant with the established information security policies and procedures.
• Meeting or exceeding the required competencies related to our function.
• Continually improving the established ISMS, adopting International Standards and best practices.

It is therefore our duty to ensure confidentiality, integrity, and availability of clients’ data and our information assets.

This policy applies to the entire organization, or employees, as well as business partners.

The management shall ensure that this policy is communicated to all relevant interested parties and reviewed regularly or whenever a significant change occurs.