Skip to content

    Integrated Management System

    Information Security and Business Continuity Objective Policy Statement

    Purpose

    This policy statement defines the framework within which the integrated management system (information security management system and business continuity management system) will be managed across Nomba and demonstrates top management commitment and support for the Integrated Management System throughout Nomba. This policy serves as the basis from which all information security, business continuity and data protection related policies emanate.

    Scope

    This policy is applicable to all Nomba personnel, contractors, vendors, and other parties, and covers all information entrusted to or owned by Nomba and stored, processed, or transmitted on the organisation's information systems and operated by the organisation.

    Information Security Objectives

    Nomba has set the following major information security and business continuity objectives:

    • Objective 1 – Ensure 100% team productivity and security in the event of physical disruptions (e.g., fire, flood, political unrest).
    • Objective 2 – Ensure 100% protection and restoration of critical data (merchant information, transactions, customer support logs, etc.) in case of service disruption.
    • Objective 3 – Maintain 100% operations and safeguard reputation in case of sudden policy changes or license disruptions.

    Information Security and Business Continuity Policy

    Nomba is committed to the confidentiality, integrity and availability of its information assets and shall implement measures through the establishment of appropriate controls.

    Nomba is committed to the continual improvement of its information security and business continuity programme to protect the organisation's information assets against all threats.

    Nomba is also committed to complying with all applicable legal, regulatory, and contractual requirements related to information security and business continuity in its services and operations.

    All users and custodians of information assets owned by or entrusted to Nomba shall comply with this policy and exercise a duty of care in relation to the storage, processing, and transmission of the organisation's information and information systems.