The day-to-day responsibility for information security and contacts with external organizations regarding legal requirements, including data protection, rests with the Security Officer. Every employee understands the importance of information security and applies this within their own area of work. The Code of Conduct serves as the guiding principle.

Knowledge and expertise are essential for sustainable information security and are safeguarded within the organization. All employees hold a Personal Data Protection Certificate (VGB) and are trained in information security awareness and the use of procedures. Employees are required to protect the information under their care and to immediately report any suspected security incidents. Compliance with information security procedures, as laid down in the Information Security Policy, forms part of the standard operating procedures. Non-compliance will result in disciplinary measures.

All legal and regulatory requirements are complied with and are regularly monitored. Information security is an integral part of business operations and aims to ensure business continuity and minimize business damage by preventing and/or limiting the impact of security incidents.

The measures taken contribute to optimizing the quality of IT systems, meeting the expectations of customers and stakeholders, and continuously improving the internal organization. Customers and stakeholders may rely on the fact that information:

1. Is treated confidentially and is protected against unauthorized disclosure;

2. Has integrity and is protected against unauthorized or accidental modification;

3. Is available for achieving business objectives.

Thus drawn up in Hoofddorp Drs. Ing. Guy A.H. Driebeek director smartLOXS.