ISMS Policy Statement
CodeMax understands the importance of providing secure and trusted solutions, by not only understanding our own environment, but also by understanding the external factors around us, the laws and regulations that govern us, the individual needs of our customers, and the privacy of those utilizing our solutions.
Our Security program establishes and maintains an Information Security Management System (ISMS) inline with ISO 27001:2022 Standard, and continually reviewed to improve the system with established and evolving controls. The program is intended to meet the below core objectives.
– Ensures that our software products are built on secure coding principles.
– Ensures that IT Infrastructure is resilient to cyber attack and disasters through efficient recovery measures.
– Ensures that all changes to the IT infrastructure are consulted, planned and tested before implementation.
– Ensure that all breaches of information security, actual or suspected are investigated thoroughly and reported as applicable through an incident management procedure.
– Ensure the risks are mitigated to an acceptable level through a risk management framework.
– Ensure compliance with legal, regulatory and contractual requirements related to Information Security.
Our CISO is responsible for planning, implementing, and maintaining our vision, purpose, and methodology, with the full support of executive leadership.
We do this by:
– Setting and reviewing measurable objectives and ensuring these objectives are met.
– Monitoring, analyzing, and evaluating compliance to resolve any non-conformities.
– Providing the necessary resources for the organization to achieve its objectives.
– Developing a culture and conscience of Information security in our day today work by various awareness programmes.
Founder, Chairman & CEO
Mayur Virkar