Information Security Policy

MMCY is committed to safeguarding the confidentiality, integrity, and availability of information assets, in line with ISO/IEC 27001:2022 standards. Our Information Security Management System (ISMS) reflects our dedication to protecting sensitive data for clients, employees, and partners from risks, including unauthorized access, disclosure, alteration, and destruction.

• Confidentiality: Ensuring that all sensitive and personal information is accessible only to authorized personnel, in accordance with legal, regulatory, and contractual requirements.
• Risk Management: Identifying, assessing, and mitigating risks to information assets using a structured risk management approach that aligns with the latest threat landscape.
• Integrity: Maintaining the accuracy, consistency, and reliability of information assets throughout their lifecycle with controlled processes for data handling, validation, and monitoring.
• Compliance: Meeting all relevant legal, regulatory, and contractual obligations, including global and regional data protection laws, to protect the data we manage on behalf of our clients.
• Availability: Providing timely and reliable access to information and systems for authorized users through robust, resilient IT systems, processes, and contingency planning.
• Continual Improvement: We are committed to continuously improve our ISMS by periodically reviewing, auditing, and updating our policies, controls, and procedures to ensure their effectiveness and alignment with the evolving security landscape.