PYLONES, in accordance to its strategic business objectives and Information security standards and check systems has developed and implements an Information Security Management System, which applies to all users of information assets, information owners and information custodians including:

• PYLONES employees and contractor personnel,
• Business partners,
• PYLONES affiliated partners or third parties, including vendors, suppliers, data processing and process control systems,

that are in possession of or using information and/or information processing facilities owned by PYLONES.

This policy covers all Information Systems (IS) environments operated by PYLONES or contracted with a third party for use by PYLONES.

PYLONES, in the realm of all its activities:

• Commits to protect and ensure the Confidentiality, Integrity and Availability of the information it possesses and manages
• Commits to comply with business and legal regulatory requirements and contractual security obligations
• Has set a mechanism for continual identification, assessment and treatment of threats of Information security
• Reviews its corporate risk management periodically, so that the Information Security Management System steadily supports PYLONES strategic business objectives while identifying and managing risk to acceptable levels
• Commits to continually improve the Information Security Management System through the establishment and regular review of measurable security objectives at relevant functions and levels of the organization
• Develops and implements policies and procedures while considering the protection of the organization’s information assets from all threats both internal and external
• Provides systems for protection against unauthorized access, intrusions and other malicious actions
• Creates mechanisms to identify and respond to data breaches and security incidents
• Has developed, tests and revises Disaster Recovery and Business Continuity Plans
• Communicates all pertinent security policies to Customers, Employees and other interested parties as applicable

The General Manager, the Senior Management Team and all employees are committed to adhere to all Policies and Procedures of the Information Security Management System.

PYLONES Management fully supports ISMS, confirms its commitment by taking all necessary measures, and ensures that this policy is communicated, understood, implemented and maintained at all levels of the organization and regularly reviewed for continual suitability.