Information Security Policy
Cede recognizes that information is essential to the delivery of secure, reliable and trusted technology-enabled financial services. This Policy sets the direction for protecting information and managing information security in a manner that supports Cede's purpose, strategic direction and obligations to customers, partners, regulators and other interested parties.
Cede shall:
- protect the confidentiality, integrity and availability of information and associated assets;
- establish, implement, maintain and continually improve an Information Security Management System appropriate to the nature, scale and complexity of Cede's operations;
- establish and review information security objectives that support Cede's strategic direction and respond to relevant risks, opportunities and interested-party requirements;
- satisfy applicable legal, regulatory, contractual and other requirements related to information security; and
- promote shared responsibility and appropriate awareness for information security among Ceders and other persons working on Cede's behalf.
Information security objectives shall be established at relevant functions and levels and shall be consistent with this Policy. In setting and reviewing those objectives, Cede shall consider its strategic priorities, information security risks, applicable requirements, the protection of critical information and services, and opportunities to improve information security performance.
This Policy applies to all Ceders and other persons working on behalf of Cede. It shall be maintained as documented information, communicated within Cede and made available to relevant interested parties, as appropriate.
The Policy shall be reviewed at planned intervals and following significant change to ensure its continuing suitability and alignment with Cede's purpose and strategic direction.