Information, managed securely.
Our risk-based information security policy, which protects the confidentiality, integrity and availability of information.
Information security policy.
The senior management of A.B Foods has set the information security policy so that it includes a commitment to the responsibilities of the services our company provides, to compliance with legislation and to the continuous improvement of its effectiveness, and so that it forms a framework for setting and reviewing information security objectives.
Senior management makes sure the policy is communicated and understood, and reviews it in the management review for its continued suitability.
As the management of A.B Foods, in line with our mission and vision, we commit to meeting the conditions defined in the regulations within the scope of our business, and what those conditions require.
What we
protect.
Our information security policy.
The three commitments that frame our work.
Meeting expectations
To meet the expectations of our customers and of the organisations we serve under contract, and to strengthen our information processing capabilities, we carry out our work within the scope and boundaries of information security.
Privacy
We accept that all confidential, commercial and private information processed in the information technology systems we serve is the privacy of the customer, and we make sure it cannot be obtained anywhere, by anyone, without the customer’s knowledge and consent, in keeping with confidentiality, integrity and availability.
Legal obligations
We commit to complying with legal and regulatory requirements and to taking into account obligations and dependencies arising from contracts or relating to third parties.
How we prove the policy is met.
A.B Foods declares that it shows this policy is met by doing the following.
Objectives and plans
Information security objectives are defined and planned.
Risk management
Risk analyses are carried out; risk assessments and risk criteria are set out from their results, and risk is managed within that framework.
Responsibilities
The importance of meeting the information security objectives and complying with the policies, legal responsibilities and the need for continuous improvement are defined.
Resources
Sufficient financial, human, equipment, software, consultancy and training resources are provided to operate, monitor, review, maintain and improve the information security system.
Acceptable risk
The work needed to set the criteria for accepting risk and the acceptable risk levels is organised and managed.
General Manager
Read our other policies.
Every policy is part of the same management approach.