Security

The confidentiality, integrity, and availability of information, in all its forms, are critical to the ethical, legal and professional duty of TresBiz. This security policy outlines TresBizz approach to information security management. It establishes the guiding principles and responsibilities required to protect the company’s information. Supporting policies provide further details. TresBizz is committed to a robust implementation of Information Security Management within the constraints of its available financial, technical and human resources. It strives to ensure that its data is kept confidential, secure, and accessible. The principles defined in this policy are applied to all the physical and electronic information assets for which TresBizz is responsible. TresBizz is specifically committed to preserving the confidentiality, integrity, and availability of documentation and data supplied by and generated by carrying out work agreed by contract in accordance with the requirements of data security standard ISO 27001.

The primary objectives of this policy are to:

• Ensure the protection of all TresBizz information (including but not limited to all computers, mobile devices, networking equipment, software, intellectual property, hard copy information, and data) and to reduce the risks of theft, loss, misuse, damage, or abuse of this information
• Ensure that staff and other authorized users have access to a safe and secure information system.
• Ascertain that all users are aware of their own responsibilities for maintaining the confidentiality and integrity of the data they handle.
• Respond to feedback and update as needed, thereby initiating a cycle of continuous improvement.
• TresBizz efforts to maintain accredited certification to ISO 27001.