OUR INFORMATION SECURITY Policy

 We at SUM8 MARITIME PVT LTD are focused on handling and processing data from ships in the oceans. We are committed to put in place and proactively manage our Information Security Management System (ISMS) to protect the Confidentiality, Integrity and Availability of business information, information processing facilities and to provide a secure work environment to our employees and interested parties. We strive to continually improve our information security management system by periodically reviewing and updating our ISMS policies, framing our information security objectives and its associated controls in compliance with the applicable standards, changes in context, customer, statutory and regulatory requirements. 

 We have established an Information Security Steering Committee and Information Security Task Force to effectively manage and to provide support in achieving our information security objectives. We strive to develop and implement effective information security controls which suit the context of our organization from time to time by: 

•  Assessing our information assets for the risks associated and managing the identified risk proactively. 
•  Setting, reviewing, updating and analyzing the information security objectives periodically. 
•  Monitoring and measuring the performance of our ISMS. 
•   Ensuring appropriate level of awareness regarding our information security policy, topic specific policies, procedures and controls to our employees and the interested parties who are provided with the access to our information systems. 
•  Manage all information security incidents through adopting appropriate incident management programs.  
•  Classifying all business and client information in compliance with the applicable requirements from time to time. 
•  Controlling changes to information systems. 
•  Providing information security awareness and education to employees and interested parties. 
•  Continually adopting industry best practices and advancements in technology. 
•  Complying with applicable legal, regulatory, contractual and other requirements. 
•  Providing adequate resources required to manage and support effective implementation of this policy. 
•  Preventing interruption to business processes by implementing Business Continuity Program. 
•  Periodically reviewing this policy for its continued suitability and applicability. 

 All the interested parties are required to acknowledge their responsibility towards the set policy and to provide their feedback and contribution towards the achievement and improvement of our information security objectives.