DNS Technologies Ltd has implemented an Information Security Management System (ISMS) in line with the international standard for information security, ISO 27001:2022 to maintain an adequate level of information security for the benefits of its interested parties including but not limited to management, employees, clients.

This ISMS Policy applies to all business processes, information systems, infrastructure, and employees of DNS Technologies Ltd.

Commitments and Objectives

In line with its strategic direction, DNS Technologies Ltd commits to:

• Communicate and enforce this ISMS Policy at all levels of the organisation and ensure it is available to all interested parties as appropriate;
• Comply to all applicable laws and regulations, contractual obligations, and requirements of ISO/IEC 27001:2022;
• Adopt a risk management approach to identify and continually assess and treat information security risks continually;
• Ensure confidentiality, integrity, and availability of relevant information in all processes;
• Protect information assets against unauthorised access, modification, loss or destruction;
• Establish, maintain and test business continuity plans to ensure resilience;
• Provide adequate resources to maintain and improve the ISMS.
• Maintain a framework for defining, monitoring, and achieving measurable information security objectives in accordance with ISO/IEC 27001:2022.

Responsibilities

Management shall require all personnel to apply information security in accordance with this policy, supporting topic-specific policies, and related procedures of DNS Technologies Ltd.

Maintenance and Continual Improvement

The policy shall be reviewed at least annually and updated as required to address changes in the business context, information security environment, or applicable legal and regulatory requirements.