Information
Security Policy

Information Security Policy

Critical River is committed to maintaining and improving information security, and minimizing exposure to risks by:

• Ensuring the confidentiality of corporate and client information
• Protecting sensitive information against unauthorized access
• Maintaining integrity of information
• Ensuring information access to authorized personnel only
• Providing information security training to all staff members
• Meeting expectations and requirements of interested parties with respect to information security
• Meeting regulatory and legislative requirements
• Creating business continuity plans that are regularly updated and tested
• Ensuring that all incidents reported to CriticalRiver’s ISMS team are investigated and acted upon by assigned authorities
• Complying with the requirements of ISO 27001 for information security
• Communicating this policy statement to the public, through our website and on request